Unscored severity · published Jun 29, 2012
CVE-2012-1164
slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which…
–
CVSS
3.6%
EPSS
No
On KEV
Description
slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.6% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Openldap · Openldap
through 2.4.29; 2.4.6; 2.4.7; 2.4.8; 2.4.9; 2.4.10; +18 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1164
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1164
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2012-0899.html
seclists.org
http://seclists.org/fulldisclosure/2019/Dec/26
Vendor Advisory
http://secunia.com/advisories/48372
Vendor Advisory
http://secunia.com/advisories/49607
security.gentoo.org
http://security.gentoo.org/glsa/glsa-201406-36.xml
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2012:130
More from Openldap
9.8
CVE-2022-29155
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query
9.8
CVE-2010-0211
The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a…
7.5
CVE-2023-2953
A vulnerability was found in openldap
7.5
CVE-2020-25710
A flaw was found in OpenLDAP in versions before 2.4.56
7.5
CVE-2020-25709
A flaw was found in OpenLDAP