high7.5
CVE-2014-8182
An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages.
Impact
An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS responses.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openldap | Openldap | Version 2.4 |
| Debian | Debian Linux | Versions 8.0, 9.0, 10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://access.redhat.com/security/cve/cve-2014-8182
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8182
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-8182
- https://security-tracker.debian.org/tracker/CVE-2014-8182
- https://access.redhat.com/security/cve/cve-2014-8182
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8182
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-8182
- https://security-tracker.debian.org/tracker/CVE-2014-8182