CVE-2015-1545 Null dereference in n/a

What is CVE-2015-1545?

CVE-2015-1545 is a medium-severity vulnerability in Openldap Openldap, published on 12 Feb 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an empty attribute list in a deref control in a search request.

Which versions are affected by CVE-2015-1545?

It affects 1 product.

Products include Openldap Openldap.

How do I fix CVE-2015-1545?

Upgrade to a fixed version.

Is CVE-2015-1545 being exploited?

There is no known exploitation of CVE-2015-1545 in the wild and no public exploit code.

Other vulnerabilities in Openldap Openldap

• CVE-2015-3276 Weak cryptography in n/a High 7.5
• CVE-2002-1378 Memory corruption in n/a High 7.5
• CVE-2002-1379 Code injection in n/a High 7.5
• CVE-2002-0045 Missing authorization in n/a High 7.5
• CVE-2005-4442 Privilege escalation in n/a High 7.2

All Openldap Openldap vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2015-1545, GHSA-qwqq-jvm7-rm7c, MGASA-2015-0143, UBUNTU-CVE-2015-1545.