CVE-2008-2952: Medium severity red hat openldap servers vulnerability
Published Jul 1, 2008
·Updated
liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via crafted ASN.1 BER datagrams that trigger an assertion error.
Affected Software
47 affected components
openldap OpenLDAP=2.2.4
openldap OpenLDAP=2.2.5
openldap OpenLDAP=2.2.6
openldap OpenLDAP=2.2.7
openldap OpenLDAP=2.2.8
openldap OpenLDAP=2.2.9
openldap OpenLDAP=2.3.4
openldap OpenLDAP=2.3.5
openldap OpenLDAP=2.3.6
openldap OpenLDAP=2.3.7
openldap OpenLDAP=2.3.8
openldap OpenLDAP=2.3.9
openldap OpenLDAP=2.3.10
openldap OpenLDAP=2.3.11
openldap OpenLDAP=2.3.12
openldap OpenLDAP=2.3.13
openldap OpenLDAP=2.3.14
openldap OpenLDAP=2.3.15
openldap OpenLDAP=2.3.16
openldap OpenLDAP=2.3.17
openldap OpenLDAP=2.3.18
openldap OpenLDAP=2.3.19
openldap OpenLDAP=2.3.20
openldap OpenLDAP=2.3.21
openldap OpenLDAP=2.3.22
openldap OpenLDAP=2.3.23
openldap OpenLDAP=2.3.24
openldap OpenLDAP=2.3.25
openldap OpenLDAP=2.3.26
openldap OpenLDAP=2.3.27
openldap OpenLDAP=2.3.28
openldap OpenLDAP=2.3.29
openldap OpenLDAP=2.3.30
openldap OpenLDAP=2.3.31
openldap OpenLDAP=2.3.32
openldap OpenLDAP=2.3.33
openldap OpenLDAP=2.3.34
openldap OpenLDAP=2.3.35
openldap OpenLDAP=2.3.36
openldap OpenLDAP=2.3.37
openldap OpenLDAP=2.3.38
openldap OpenLDAP=2.3.39
openldap OpenLDAP=2.3.40
openldap OpenLDAP=2.3.41
openldap OpenLDAP=2.3.42
openldap OpenLDAP=2.3.43
openldap OpenLDAP=2.4.10
Event History
Jul 1, 2008
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-2952?
CVE-2008-2952 is classified as a denial of service vulnerability that can lead to program termination.
2
How do I fix CVE-2008-2952?
To fix CVE-2008-2952, update OpenLDAP to a version newer than 2.4.10, which addresses this vulnerability.
3
Who is affected by CVE-2008-2952?
CVE-2008-2952 affects various versions of OpenLDAP from 2.2.4 to 2.4.10.
4
What causes the CVE-2008-2952 vulnerability?
CVE-2008-2952 is caused by crafted ASN.1 BER datagrams that trigger an assertion error in OpenLDAP.
5
Is there a workaround for CVE-2008-2952?
There are no specific workarounds for CVE-2008-2952 other than upgrading to a secure version of OpenLDAP.