A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
OpenLDAP deployments running a version before 2.4.57 are affected. The flaw is in slapd's saslAuthzTo processing.
The supplied severity vector indicates that it can be exploited remotely, requires low attack complexity, and needs no privileges or user interaction.
Successful exploitation can trigger an invalid pointer free and crash slapd, causing a denial of service. The supplied vector indicates no confidentiality or integrity impact.
The available information identifies saslAuthzTo processing as the affected area, but does not state whether this processing is enabled or reachable in a default OpenLDAP configuration.
The flaw affects OpenLDAP versions before 2.4.57; upgrading to 2.4.57 or later addresses the affected version range.