OpenLDAP.ber_get_next.BER.Decoding.DoS

description-logoDescription

This indicates an attempt to exploit a denial-of-service vulnerability in OpenLDAP slapd.
The vulnerability is caused by a design error when decoding ASN.1 BER network messages. A remote attacker may exploit this to crash affected systems, creating a denial-of-service condition.

affected-products-logoAffected Products

OpenLDAP, 2.3.41
OpenLDAP, 2.3.42

Impact logoImpact

Denial of Service

recomended-action-logoRecommended Actions

Update to version 2.3.43:
http://www.openldap.org/software/download/.

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)