CVE-2007-6698: Double Free
First published: Fri Feb 01 2008(Updated: )
It was discovered that modify operation with NOOP control on an entry stored in BDB backed can cause OpenLDAP's slapd daemon to crash. Further details and patch can be found in upstream bug / CVS: <a href="http://www.openldap.org/its/index.cgi/Software%20Bugs?id=4925">http://www.openldap.org/its/index.cgi/Software%20Bugs?id=4925</a> <a href="http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/back-bdb/modify.c.diff?r1=1.124.2.16&r2=1.124.2.17&f=h">http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/back-bdb/modify.c.diff?r1=1.124.2.16&r2=1.124.2.17&f=h</a> NOOP control was introduced in OpenLDAP 2.1 branch as documented on roadmap page: <a href="http://www.openldap.org/software/roadmap.html">http://www.openldap.org/software/roadmap.html</a> This issue was fixed upstream in version 2.3.36: <a href="http://www.openldap.org/devel/cvsweb.cgi/~checkout~/Attic/CHANGES?rev=1.5.8.414">http://www.openldap.org/devel/cvsweb.cgi/~checkout~/Attic/CHANGES?rev=1.5.8.414</a>
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat OpenLDAP Servers | <=2.3.35 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.openldap.org/lists/openldap-bugs/200704/msg00067.html
- http://www.openldap.org/lists/openldap-bugs/200704/msg00068.html
- https://bugzilla.redhat.com/show_bug.cgi?id=431203
- https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00105.html
- http://secunia.com/advisories/28817
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0059
- http://www.securityfocus.com/bid/26245
- http://secunia.com/advisories/28953
- http://www.redhat.com/support/errata/RHSA-2008-0110.html
- http://www.securitytracker.com/id?1019480
- http://secunia.com/advisories/29068
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:058
- http://www.ubuntu.com/usn/usn-584-1
- http://secunia.com/advisories/29225
- http://secunia.com/advisories/29256
- http://www.debian.org/security/2008/dsa-1541
- http://secunia.com/advisories/29682
- http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html
- http://secunia.com/advisories/29957
- http://wiki.rpath.com/Advisories:rPSA-2008-0059
- http://support.apple.com/kb/HT3937
- http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
- http://www.vupen.com/english/advisories/2009/3184
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10748
- http://www.securityfocus.com/archive/1/488242/100/200/threaded
- http://www.openldap.org/its/index.cgi/Software%20Bugs?id=4925
- http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/back-bdb/modify.c.diff?r1=1.124.2.16&r2=1.124.2.17&f=h
- http://www.openldap.org/software/roadmap.html
- http://www.openldap.org/devel/cvsweb.cgi/~checkout~/Attic/CHANGES?rev=1.5.8.414
- http://rhn.redhat.com/errata/RHSA-2008-0110.html
- https://admin.fedoraproject.org/updates/F7/FEDORA-2008-1307
Frequently Asked Questions
What is the impact of CVE-2007-6698?
CVE-2007-6698 can cause the OpenLDAP slapd daemon to crash during a modify operation with NOOP control.
Which versions of OpenLDAP are affected by CVE-2007-6698?
CVE-2007-6698 affects OpenLDAP versions up to and including 2.3.35.
How can I mitigate the issue related to CVE-2007-6698?
To mitigate CVE-2007-6698, you should update OpenLDAP to a patched version that addresses this vulnerability.
What types of operations trigger the vulnerability in CVE-2007-6698?
The vulnerability in CVE-2007-6698 is triggered by a modify operation using the NOOP control.
Is there a known fix for CVE-2007-6698?
Yes, a patch for CVE-2007-6698 is available and should be applied to affected systems.
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2007-6698
- agent/author
- agent/references
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/event
- agent/description
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/openldap
- canonical/red hat openldap servers
- version/red hat openldap servers/2.3.35