CVE-2007-6698: Double Free
It was discovered that modify operation with NOOP control on an entry stored in BDB backed can cause OpenLDAP's slapd daemon to crash. Further details and patch can be found in upstream bug / CVS:
http://www.openldap.org/its/index.cgi/Software%20Bugs?id=4925 http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/back-bdb/modify.c.diff?r1=1.124.2.16&r2=1.124.2.17&f=h
NOOP control was introduced in OpenLDAP 2.1 branch as documented on roadmap page:
http://www.openldap.org/software/roadmap.html
This issue was fixed upstream in version 2.3.36:
http://www.openldap.org/devel/cvsweb.cgi/~checkout~/Attic/CHANGES?rev=1.5.8.414
Other sources
The BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a denial of service (crash) via a potentially-successful modify operation with the NOOP control set to critical, possibly due to a double free vulnerability.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the impact of CVE-2007-6698?
CVE-2007-6698 can cause the OpenLDAP slapd daemon to crash during a modify operation with NOOP control.
Which versions of OpenLDAP are affected by CVE-2007-6698?
CVE-2007-6698 affects OpenLDAP versions up to and including 2.3.35.
How can I mitigate the issue related to CVE-2007-6698?
To mitigate CVE-2007-6698, you should update OpenLDAP to a patched version that addresses this vulnerability.
What types of operations trigger the vulnerability in CVE-2007-6698?
The vulnerability in CVE-2007-6698 is triggered by a modify operation using the NOOP control.
Is there a known fix for CVE-2007-6698?
Yes, a patch for CVE-2007-6698 is available and should be applied to affected systems.