CVE-2014-8182

HIGH

7.5

Description

An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS responses.

CVE Details

CVSS v3.1 Score7.5

SeverityHIGH

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published1/2/2020

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

debian:debian_linuxopenldap:openldap

Weaknesses (CWE)

CWE-193

References

https://access.redhat.com/security/cve/cve-2014-8182(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8182(secalert@redhat.com)

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-8182(secalert@redhat.com)

https://security-tracker.debian.org/tracker/CVE-2014-8182(secalert@redhat.com)

https://access.redhat.com/security/cve/cve-2014-8182(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8182(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-8182(af854a3a-2127-422b-91ae-364da2661108)

https://security-tracker.debian.org/tracker/CVE-2014-8182(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.