CVE-2011-1081: openldap Resource Management Errors

EPSS trend

Probability

14.47%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 14.47% on 19-09-2026

19-09-202619-10-2026

EPSS score

14.47%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (bugzilla.redhat.com)
Maturity: unknown
exploit-databasedoslinuxVerified
OpenLDAP 2.4.x - 'modrdn' NULL OldDN Remote Denial of Service
Maturity: poc

References

21 links

security.gentoo.org/glsa/glsa-201406-36.xmlVendor AdvisoryX Refsource GENTOO
exchange.xforce.ibmcloud.com/vulnerabilities/66239VDB EntryX Refsource XF
openwall.com/lists/oss-security/2011/03/01/15Mailing ListX Refsource MLIST
openwall.com/lists/oss-security/2011/03/01/11Mailing ListX Refsource MLIST
www.openldap.org/its/index.cgi/Software%20Bugs?id=6768X Refsource CONFIRM
www.openldap.org/lists/openldap-announce/201102/msg00000.htmlMailing ListX Refsource MLISTPatch
www.mandriva.com/security/advisories?name=MDVSA-2011:056Vendor AdvisoryX Refsource MANDRIVA
bugzilla.novell.com/show_bug.cgi?id=674985X Refsource CONFIRM
www.redhat.com/support/errata/RHSA-2011-0347.htmlVendor AdvisoryX Refsource REDHAT
openwall.com/lists/oss-security/2011/02/28/1Mailing ListX Refsource MLIST

Show all 21 references

kb.juniper.net/InfoCenter/index?page=content&id=JSA10705X Refsource CONFIRM
www.mandriva.com/security/advisories?name=MDVSA-2011:055Vendor AdvisoryX Refsource MANDRIVA
openwall.com/lists/oss-security/2011/02/28/2Mailing ListX Refsource MLISTPatch
secunia.com/advisories/43718Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/USN-1100-1Vendor AdvisoryX Refsource UBUNTU
securitytracker.com/id?1025191VDB EntryX Refsource SECTRACK
www.vupen.com/english/advisories/2011/0665VDB EntryX Refsource VUPENVendor Advisory
secunia.com/advisories/43331Third Party AdvisoryX Refsource SECUNIAVendor Advisory
bugzilla.redhat.com/show_bug.cgi?id=680975X Refsource CONFIRMExploitPatch
www.openldap.org/devel/cvsweb.cgi/servers/slapd/modrdn.c.diff?r1=1.170.2.8&r2=1.170.2.9X Refsource CONFIRMPatch
security-tracker.debian.org/tracker/CVE-2011-1081Advisory

Related vulnerabilities

CVE-2013-4449debianopenldap+1310.91%12y ago05-02-2014 18:00The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service (slapd crash) by unbinding immediately after a search request, which triggers rwm_conn_destroy to free the session context while it is being used by rwm_op_search.CVE-2008-2952debianopenldap+913.17%18y ago01-07-2008 21:00liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via crafted ASN.1 BER datagrams that trigger an assertion error.CVE-2008-0658openldapopenldap3.05%18y ago13-02-2008 20:00slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control, a related issue to CVE-2007-6698.CVE-2012-2668openldapopenldap+63.95%14y ago17-06-2012 01:00libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS backend, always uses the default cipher suite even when TLSCipherSuite is set, which might cause OpenLDAP to use weaker ciphers than intended and make it easier for remote attackers to obtain sensitive information.CVE-2012-1164debianopenldap+73.58%14y ago29-06-2012 19:00slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned.CVE-2011-1025debianopenldap+13.87%15y ago20-03-2011 01:00bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name (DN), which allows remote attackers to bypass intended access restrictions via an arbitrary password.

All vulnerabilities inopenldap

CVE-2011-1081: openldap Resource Management Errors

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References