CVE-2015-1545: openldap
Vulnerability summary
CVE-2015-1545 is a medium (CVSS 5.0) vulnerability in openldap. EPSS estimates a 11.09% chance of exploitation in the next 30 days, higher than 95.8% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 4 · Related 2Timeline
- 12-02-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an empty attribute list in a deref control in a search request.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
11.09%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
0.00 pp
From 11.09% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (openldap.org)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Debian1 product
- openldap< 2.4.40-4
Mageia1 product
- openldap< 2.4.38-1.3.mga4
Openldap1 product
- openldap2.4.13 | 2.4.14 | 2.4.15 | 2.4.16 | 2.4.17 | 2.4.18 | 2.4.19 | 2.4.20 | 2.4.21 | 2.4.22 | 2.4.23 | 2.4.24 | 2.4.25 | 2.4.26 | 2.4.27 | 2.4.28 | 2.4.29 | 2.4.30 | 2.4.31 | 2.4.32 | 2.4.33 | 2.4.34 | 2.4.35 | 2.4.36 | 2.4.37 | 2.4.38 | 2.4.39 | 2.4.40
Ubuntu1 product
- openldap< 2.4.31-1+nmu2ubuntu8.1
4 vendors · 4 products
References
25 links- www.openldap.org/devel/…X Refsource CONFIRM
- support.apple.com/HT204659X Refsource CONFIRM
bugs.debian.org/cgi-bin/bugreport.cgi?bug=776988X Refsource CONFIRM- www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.htmlX Refsource CONFIRM
Show all 25 references
- support.apple.com/kb/HT210788X Refsource CONFIRM