Description
Multiple buffer overflows in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allow remote attackers to execute arbitrary code via (1) long -t or -r parameters to slurpd, (2) a malicious ldapfilter.conf file that is not properly handled by getfilter functions, (3) a malicious ldaptemplates.conf that causes an overflow in libldap, (4) a certain access control list that causes an overflow in slapd, or (5) a long generated filename for logging rejected replication requests.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.0 | openldap2 | 2.0.23-6.3 | DSA-227 |
Advisories 1
- DSA-227 openldap2 - buffer overflows and other bugs Debian Security (DSA / DLA) · Mar 9, 2026
References
- 6328 vdb-entry
- N-043 third-party-advisory government-resource
- RHSA-2003:040 vendor-advisory
- 200212-12 vendor-advisory
- TLSA-2003-5 vendor-advisory
- openldap-multiple-bo(10800) vdb-entry
- SuSE-SA:2002:047 vendor-advisory
- MDKSA-2003:006 vendor-advisory
- CLA-2002:556 vendor-advisory
- DSA-227 vendor-advisory
- http://www.linuxsecurity.com/advisories/gentoo_advisory-2704.html