Description
slapo-pcache (overlays/pcache.c) in slapd in OpenLDAP before 2.3.39, when running as a proxy-caching server, allocates memory using a malloc variant instead of calloc, which prevents an array from being initialized properly and might allow attackers to cause a denial of service (segmentation fault) via unknown vectors that prevent the array from being null terminated.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | openldap2.3 | 2.3.38-1+lenny1 | DTSA-87-1 |
| Debian 4.0 | openldap2.3 | 2.3.30-5+etch1 | DSA-1541-1 |
Advisories 2
- DSA-1541-1 openldap2.3 Debian Security (DSA / DLA) · Mar 9, 2026
- DTSA-87-1 openldap2.3 - denial of service Debian Security (DSA / DLA) · Mar 9, 2026
References
- 27683 third-party-advisory
- MDVSA-2008:058 vendor-advisory
- 29461 third-party-advisory
- 29225 third-party-advisory
- 29682 third-party-advisory
- http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5163
- 27756 third-party-advisory
- GLSA-200803-28 vendor-advisory
- DSA-1541 vendor-advisory
- SUSE-SR:2007:024 vendor-advisory
- [openldap-announce] 20071026 OpenLDAP 2.3.39 available mailing-list
- 27424 third-party-advisory
- USN-551-1 vendor-advisory
- ADV-2007-3645 vdb-entry
- 26245 vdb-entry
- FEDORA-2007-741 vendor-advisory
- 27868 third-party-advisory