CVE-2008-2952
MEDIUM 5.0EPSS 13.2%
liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via crafted ASN.1 BER datagrams that trigger an assertion error.
- CVSS v2.0 NVD
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P - EPSS
- 13.17% chance of exploitation in the next 30 days, 96th percentile
- Published
- 2008-07-01
- Updated
- 2024-08-07
ExploitDB entries (1)
Security advisories
- http://secunia.com/advisories/30853
- http://secunia.com/advisories/30917
- http://secunia.com/advisories/30996
- http://secunia.com/advisories/31326
- http://secunia.com/advisories/31364
- http://secunia.com/advisories/31436
- http://secunia.com/advisories/32254
- http://secunia.com/advisories/32316
- http://www.vupen.com/english/advisories/2008/1978/references
- http://www.vupen.com/english/advisories/2008/2268
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:144
- http://www.redhat.com/support/errata/RHSA-2008-0583.html
- http://www.securityfocus.com/bid/30013
- http://www.ubuntu.com/usn/usn-634-1