CVE-2017-17740 Use after free in n/a
Remote attackers can crash the OpenLDAP server via a member MODDN operation when the nops module and memberof overlay are enabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2017-17740?
CVE-2017-17740 is a high-severity use after free vulnerability in Openldap Openldap, published on 18 Dec 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation.
Weakness: CWE-119
Which versions are affected by CVE-2017-17740?
It affects 4 products.
Linux distribution packages (8)
openldap2 SUSE:Linux Enterprise Desktop 12 SP3 | All versions | 2.4.41-18.43.1 |
openldap2 SUSE:Linux Enterprise Desktop 12 SP4 | All versions | 2.4.41-18.43.1 |
openldap2 SUSE:Linux Enterprise Server 12 SP3 | All versions | 2.4.41-18.43.1 |
openldap2 SUSE:Linux Enterprise Server 12 SP4 | All versions | 2.4.41-18.43.1 |
openldap2 SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | All versions | 2.4.41-18.43.1 |
openldap2 SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | All versions | 2.4.41-18.43.1 |
openldap2 SUSE:Linux Enterprise Software Development Kit 12 SP3 | All versions | 2.4.41-18.43.1 |
openldap2 SUSE:Linux Enterprise Software Development Kit 12 SP4 | All versions | 2.4.41-18.43.1 |
Products include Mcafee Policy Auditor, Openldap Openldap, Opensuse Leap, Oracle Blockchain Platform.
How do I fix CVE-2017-17740?
Apply the vendor's patch.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2017-17740 being exploited?
There is no known exploitation of CVE-2017-17740 in the wild and no public exploit code.
Other vulnerabilities in Openldap Openldap
Sources
Also known as ALPINE-CVE-2017-17740, CLEANSTART-2026-UO26134, DEBIAN-CVE-2017-17740, GHSA-h7vm-9jwq-6c9r, ROOT-OS-DEBIAN-12-CVE-2017-17740, SUSE-SU-2018:4150-1.