Skip to content
OpenAdvisories
Unscored DLA-203-1 4 CVEs

openldap - security update

Published Apr 18, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 openldap 2.4.23-7.3+deb6u1

Vulnerabilities 4

  • Unscored —
    CVE-2012-1164

    slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit…

    openldap Debian
  • Unscored —
    CVE-2013-4449 EPSS 11%

    The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attacke…

    openldap openldap Debian Ubuntu
  • Unscored —
    CVE-2014-9713

    The default slapd configuration in the Debian openldap package 2.4.23-3 through 2.4.39-1.1 allows remote authenticated …

    openldap openldap Debian Ubuntu
  • Unscored —
    CVE-2015-1545 EPSS 11%

    The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attacker…

    openldap openldap Debian Ubuntu