CVE-2008-2952

Severity CVSS v4.0:
Pending analysis
Type:
CWE-399 Resource Management Errors
Publication date:
01/07/2008
Last modified:
09/04/2025

Description

liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via crafted ASN.1 BER datagrams that trigger an assertion error.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:openldap:openldap:2.2.4:*:*:*:*:*:*:*
cpe:2.3:a:openldap:openldap:2.2.5:*:*:*:*:*:*:*
cpe:2.3:a:openldap:openldap:2.2.6:*:*:*:*:*:*:*
cpe:2.3:a:openldap:openldap:2.2.7:*:*:*:*:*:*:*
cpe:2.3:a:openldap:openldap:2.2.8:*:*:*:*:*:*:*
cpe:2.3:a:openldap:openldap:2.2.9:*:*:*:*:*:*:*
cpe:2.3:a:openldap:openldap:2.3.4:*:*:*:*:*:*:*
cpe:2.3:a:openldap:openldap:2.3.5:*:*:*:*:*:*:*
cpe:2.3:a:openldap:openldap:2.3.6:*:*:*:*:*:*:*
cpe:2.3:a:openldap:openldap:2.3.7:*:*:*:*:*:*:*
cpe:2.3:a:openldap:openldap:2.3.8:*:*:*:*:*:*:*
cpe:2.3:a:openldap:openldap:2.3.9:*:*:*:*:*:*:*
cpe:2.3:a:openldap:openldap:2.3.10:*:*:*:*:*:*:*
cpe:2.3:a:openldap:openldap:2.3.11:*:*:*:*:*:*:*
cpe:2.3:a:openldap:openldap:2.3.12:*:*:*:*:*:*:*


References to Advisories, Solutions, and Tools