CVE-2007-5708: High severity openldap OpenLDAP vulnerability
slapo-pcache (overlays/pcache.c) in slapd in OpenLDAP before 2.3.39, when running as a proxy-caching server, allocates memory using a malloc variant instead of calloc, which prevents an array from being initialized properly and might allow attackers to cause a denial of service (segmentation fault) via unknown vectors that prevent the array from being null terminated.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5708?
CVE-2007-5708 is classified as a denial of service vulnerability that can lead to segmentation faults.
How do I fix CVE-2007-5708?
To fix CVE-2007-5708, upgrade to OpenLDAP version 2.3.39 or later, where the issue is resolved.
What are the affected versions for CVE-2007-5708?
CVE-2007-5708 affects various versions of OpenLDAP prior to 2.3.39, including versions 1.0 to 2.2.28.
What causes CVE-2007-5708?
CVE-2007-5708 is caused by the improper allocation of memory using a malloc variant instead of calloc within the slapo-pcache overlay.
Is CVE-2007-5708 exploitable remotely?
Yes, CVE-2007-5708 can be exploited remotely if the OpenLDAP server is configured to operate as a proxy-caching server.