VDB

DEBIAN-CVE-2017-9287

DEBIAN-CVE-2017-9287 PUBLISHED CVSS 6.5 MEDIUM

servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access to search the directory can crash slapd by issuing a search including the Paged Results control with a page size of 0.

Risk Scores

CVSS v3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Debian:12openldap0, 0, 0
Debian:11openldap0, 0, 0
Debian:14openldap0, 0, 0
Debian:13openldap0, 0, 0

Timeline

  • May 29, 2017 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›