CVE-2007-5707: Double Free
Published Oct 30, 2007
·Updated
OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service (slapd crash) via an LDAP request with a malformed objectClasses attribute. NOTE: this has been reported as a double free, but the reports are inconsistent.
Affected Software
119 affected components
openldap OpenLDAP=1.0
openldap OpenLDAP=1.0.1
openldap OpenLDAP=1.0.2
openldap OpenLDAP=1.0.3
openldap OpenLDAP=1.1
openldap OpenLDAP=1.1.0
openldap OpenLDAP=1.1.1
openldap OpenLDAP=1.1.2
openldap OpenLDAP=1.1.3
openldap OpenLDAP=1.1.4
openldap OpenLDAP=1.2
openldap OpenLDAP=1.2.0
openldap OpenLDAP=1.2.1
openldap OpenLDAP=1.2.2
openldap OpenLDAP=1.2.3
openldap OpenLDAP=1.2.4
openldap OpenLDAP=1.2.5
openldap OpenLDAP=1.2.6
openldap OpenLDAP=1.2.7
openldap OpenLDAP=1.2.8
openldap OpenLDAP=1.2.9
openldap OpenLDAP=1.2.10
openldap OpenLDAP=1.2.11
openldap OpenLDAP=1.2.12
openldap OpenLDAP=1.2.13
openldap OpenLDAP=2.0
openldap OpenLDAP=2.0.0
openldap OpenLDAP=2.0.1
openldap OpenLDAP=2.0.2
openldap OpenLDAP=2.0.3
openldap OpenLDAP=2.0.4
openldap OpenLDAP=2.0.5
openldap OpenLDAP=2.0.6
openldap OpenLDAP=2.0.7
openldap OpenLDAP=2.0.8
openldap OpenLDAP=2.0.9
openldap OpenLDAP=2.0.10
openldap OpenLDAP=2.0.11
openldap OpenLDAP=2.0.11_9
openldap OpenLDAP=2.0.11_11
openldap OpenLDAP=2.0.11_11s
openldap OpenLDAP=2.0.12
openldap OpenLDAP=2.0.13
openldap OpenLDAP=2.0.14
openldap OpenLDAP=2.0.15
openldap OpenLDAP=2.0.16
openldap OpenLDAP=2.0.17
openldap OpenLDAP=2.0.18
openldap OpenLDAP=2.0.19
openldap OpenLDAP=2.0.20
openldap OpenLDAP=2.0.21
openldap OpenLDAP=2.0.22
openldap OpenLDAP=2.0.23
openldap OpenLDAP=2.0.24
openldap OpenLDAP=2.0.25
openldap OpenLDAP=2.0.26
openldap OpenLDAP=2.0.27
openldap OpenLDAP=2.1.2
openldap OpenLDAP=2.1.3
openldap OpenLDAP=2.1.4
openldap OpenLDAP=2.1.5
openldap OpenLDAP=2.1.6
openldap OpenLDAP=2.1.7
openldap OpenLDAP=2.1.8
openldap OpenLDAP=2.1.9
openldap OpenLDAP=2.1.10
openldap OpenLDAP=2.1.11
openldap OpenLDAP=2.1.12
openldap OpenLDAP=2.1.13
openldap OpenLDAP=2.1.14
openldap OpenLDAP=2.1.15
openldap OpenLDAP=2.1.16
openldap OpenLDAP=2.1.17
openldap OpenLDAP=2.1.18
openldap OpenLDAP=2.1.19
openldap OpenLDAP=2.1.20
openldap OpenLDAP=2.1.21
openldap OpenLDAP=2.1.22
openldap OpenLDAP=2.1.23
openldap OpenLDAP=2.1.24
openldap OpenLDAP=2.1.25
openldap OpenLDAP=2.1.26
openldap OpenLDAP=2.1.27
openldap OpenLDAP=2.1.28
openldap OpenLDAP=2.1.29
openldap OpenLDAP=2.1.30
openldap OpenLDAP=2.1_.20
openldap OpenLDAP=2.2.0
openldap OpenLDAP=2.2.1
openldap OpenLDAP=2.2.4
openldap OpenLDAP=2.2.5
openldap OpenLDAP=2.2.6
openldap OpenLDAP=2.2.7
openldap OpenLDAP=2.2.8
openldap OpenLDAP=2.2.9
openldap OpenLDAP=2.2.10
openldap OpenLDAP=2.2.11
openldap OpenLDAP=2.2.12
openldap OpenLDAP=2.2.13
openldap OpenLDAP=2.2.14
openldap OpenLDAP=2.2.15
openldap OpenLDAP=2.2.16
openldap OpenLDAP=2.2.17
openldap OpenLDAP=2.2.18
openldap OpenLDAP=2.2.19
openldap OpenLDAP=2.2.20
openldap OpenLDAP=2.2.21
openldap OpenLDAP=2.2.22
openldap OpenLDAP=2.2.23
openldap OpenLDAP=2.2.24
openldap OpenLDAP=2.2.25
openldap OpenLDAP=2.2.26
openldap OpenLDAP=2.2.27
openldap OpenLDAP=2.2.28_r2
openldap OpenLDAP=2.2.29_rev_1.134
openldap OpenLDAP=2.3.27_2.20061018
openldap OpenLDAP=2.3.28_2.20061022
openldap OpenLDAP=2.3.28_20061022
openldap OpenLDAP=2.3.28_e1.0.0
Remediation
Patch Available
Event History
Oct 30, 2007
CVE Published
07:46 PM
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-5707?
CVE-2007-5707 has a severity rating associated with a denial of service vulnerability, allowing remote attackers to crash the LDAP server.
2
How do I fix CVE-2007-5707?
To fix CVE-2007-5707, upgrade OpenLDAP to version 2.3.39 or later, which addresses the vulnerability.
3
What versions are affected by CVE-2007-5707?
CVE-2007-5707 affects all OpenLDAP versions prior to 2.3.39, including versions 1.0 to 2.3.28.
4
What type of vulnerability is CVE-2007-5707?
CVE-2007-5707 is classified as a denial of service vulnerability due to a malformed LDAP request.
5
Can CVE-2007-5707 be exploited remotely?
Yes, CVE-2007-5707 can be exploited remotely, allowing attackers to crash the OpenLDAP server.