Security Advisory

CVE-2011-4079

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-10-27 20:00:00

Last updated 2024-08-06 23:53:32

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

Off-by-one error in the UTF8StringNormalize function in OpenLDAP 2.4.26 and earlier allows remote attackers to cause a denial of service (slapd crash) via a zero-length string that triggers a heap-based buffer overflow, as demonstrated using an empty postalAddressAttribute value in an LDIF entry.

← Browse all CVEs View on cve.org ↗