CVE-2015-6908: apple mac_os_x Improper Input Validation

CVSS: 5.0v2.0MediumModified

AliasesMGASA-2015-0374SUSE-SU-2016:0090-1RHSA-2015:1840+5 more

Published 11-09-2015Last modified 06-08-2024

Vulnerability summary

CVE-2015-6908 is a medium (CVSS 5.0) Improper Input Validation vulnerability in apple mac_os_x. EPSS estimates a 19.98% chance of exploitation in the next 30 days, higher than 97.4% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk

34/100

0100

Medium · default modelHow is this calculated?

CVSS score

5.0/10

010

Medium · v2.0 (NVD)

EPSS score

19.98%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits2reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 3 · Related 3

SUSE-SU-2016:0224-1 SUSE-SU-2016:0262-1 USN-2742-1

Timeline

11-09-2015
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd.

CVSS metrics

1 score · 1 source · 1 version

v2.05.0

EPSS trend

Probability

19.98%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 19.98% on 19-09-2026

19-09-202619-10-2026

EPSS score

19.98%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (openldap.org)
Maturity: unknown
exploit-databasedoslinuxUnverified
OpenLDAP 2.4.42 - ber_get_next Denial of Service
Maturity: poc

Weaknesses

CWE · root cause

CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected systems

Suse17 products

openldap2-client-openssl1&distro=SUSE Linux Enterprise Server 11-SECURITY< 2.4.26-0.62.3
openldap2-client&distro=SUSE Linux Enterprise Desktop 11 SP3< 2.4.26-0.62.2
openldap2-client&distro=SUSE Linux Enterprise Desktop 11 SP4< 2.4.26-0.62.2
openldap2-client&distro=SUSE Linux Enterprise Server 11 SP3< 2.4.26-0.62.2
openldap2-client&distro=SUSE Linux Enterprise Server 11 SP3-TERADATA< 2.4.26-0.62.2

Show all 17

Redhat8 products

compat-openldap< 0:2.3.43_2.2.29-29.el5_11
openldap< 0:2.3.43-29.el5_11 | < 0:2.4.40-6.el6_7 | < 0:2.4.39-7.el7_1 | < 0:2.4.39-7.ael7b_1
openldap-clients< 0:2.3.43-29.el5_11 | < 0:2.4.40-6.el6_7 | < 0:2.4.39-7.el7_1 | < 0:2.4.39-7.ael7b_1
openldap-debuginfo< 0:2.3.43-29.el5_11 | < 0:2.4.40-6.el6_7 | < 0:2.4.39-7.el7_1 | < 0:2.4.39-7.ael7b_1
openldap-devel< 0:2.3.43-29.el5_11 | < 0:2.4.40-6.el6_7 | < 0:2.4.39-7.el7_1 | < 0:2.4.39-7.ael7b_1

Show all 8

Mageia2 products

openldap< 2.4.38-1.5.mga4
openldap< 2.4.40-3.1.mga5

Apple1 product

mac_os_x≤ 10.11.1

Debian1 product

openldap< 2.4.42+dfsg-2 | < 2.4.23-7.3+deb6u2 | < 2.4.31-2+deb7u1 | < 2.4.40+dfsg-1+deb8u1

Openldap1 product

openldap≤ 2.4.42

Opensuse1 product

openldap2&distro=openSUSE Tumbleweed< 1.2-22.1

Ubuntu1 product

openldap< 2.4.31-1+nmu2ubuntu8.2

8 vendors · 32 products

References

34 links

www.securityfocus.com/bid/76714VDB EntryX Refsource BID
www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlX Refsource CONFIRM
www.security-assessment.com/files/documents/advisory/OpenLDAP-ber_get_next-Denial-of-Service.pdfX Refsource CONFIRM
support.apple.com/HT205637X Refsource CONFIRM
lists.opensuse.org/opensuse-security-announce/2016-01/msg00037.htmlVendor AdvisoryX Refsource SUSE
lists.opensuse.org/opensuse-security-announce/2016-01/msg00031.htmlVendor AdvisoryX Refsource SUSE
www.openldap.org/devel/…X Refsource CONFIRM
www.debian.org/security/2015/dsa-3356Vendor AdvisoryX Refsource DEBIAN
lists.apple.com/archives/security-announce/2015/Dec/msg00005.htmlVendor AdvisoryX Refsource APPLE
www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlX Refsource CONFIRM

Show all 34 references

www.ubuntu.com/usn/USN-2742-1Vendor AdvisoryX Refsource UBUNTU
www.openldap.org/its/index.cgi/Software%20Bugs?id=8240X Refsource CONFIRMExploitVendor AdvisoryWEB
rhn.redhat.com/errata/RHSA-2015-1840.htmlVendor AdvisoryX Refsource REDHAT
www.securitytracker.com/id/1033534VDB EntryX Refsource SECTRACK
lists.opensuse.org/opensuse-security-announce/2016-01/msg00039.htmlVendor AdvisoryX Refsource SUSE
lists.opensuse.org/opensuse-security-announce/2016-01/msg00040.htmlVendor AdvisoryX Refsource SUSE
lists.opensuse.org/opensuse-security-announce/2016-01/msg00032.htmlVendor AdvisoryX Refsource SUSE
advisories.mageia.org/MGASA-2015-0374.htmlAdvisory
bugs.mageia.org/show_bug.cgi?id=16740REPORT
openwall.com/lists/oss-security/2015/09/11/5WEB
www.suse.com/support/update/announcement/2016/suse-su-20160090-1/Advisory
bugzilla.suse.com/945582REPORT
www.suse.com/security/cve/CVE-2015-6908WEB
access.redhat.com/errata/RHSA-2015:1840Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1262393REPORT
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1840.jsonAdvisory
access.redhat.com/security/cve/CVE-2015-6908REPORT
www.cve.org/CVERecord?id=CVE-2015-6908AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2015-6908Advisory
ubuntu.com/security/CVE-2015-6908REPORT
www.openwall.com/lists/oss-security/2015/09/11/2REPORT
ubuntu.com/security/notices/USN-2742-1Advisory
security-tracker.debian.org/tracker/CVE-2015-6908Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities