PT-2007-1005 · Openldap+1 · Libldap-2.3-0+2
Publicado
2007-10-30
·
Atualizado
2018-10-15
·
CVE-2007-6698
CVSS v2.0
7.1
Alta
| Vetor | AV:N/AC:M/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
OpenLDAP versions prior to 2.3.36
libldap-2.3-0 (affected versions not specified)
Description:
The issue allows remote authenticated users to cause a denial of service, potentially due to a double free vulnerability. Exploitation can lead to disruption of protected information and can be carried out remotely.
Recommendations:
For OpenLDAP versions prior to 2.3.36, update to version 2.3.36 or later to resolve the issue.
At the moment, there is no information about a newer version that contains a fix for libldap-2.3-0.
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Openldap
Red Hat
Libldap-2.3-0