Wind River Support Network

HomeDefectsCGP6-497
Fixed

CGP6-497 : Security Advisory - openldap - CVE-2015-1546

Created: Feb 25, 2015    Updated: Dec 3, 2018
Resolved Date: May 19, 2015
Previous ID: LIN6-9464
Found In Version: 6.0.0.11
Fix Version: 6.0.0.21
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace

Description

Double free vulnerability in the get_vrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of service (crash) via a crafted search query with a matched values control.<a href=http://cwe.mitre.org/data/definitions/415.html>CWE - CWE-415: Double Free</a>

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1546

Other Downloads


Live chat
Online