CVE-2010-0211: Critical severity red hat openldap servers vulnerability
The slapmodrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smrnormalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN string containing invalid UTF-8 sequences, which triggers a free of an invalid, uninitialized pointer in the slapmodsfree function, as demonstrated using the Codenomicon LDAPv3 test suite.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0211?
CVE-2010-0211 has a severity rating that indicates it can lead to a denial of service and possibly arbitrary code execution.
How do I fix CVE-2010-0211?
To fix CVE-2010-0211, you should upgrade OpenLDAP to a version that has patched this vulnerability.
What software is affected by CVE-2010-0211?
CVE-2010-0211 affects OpenLDAP 2.4.22, VMware ESXi 4.0 and 4.1, and macOS between versions 10.6.0 and 10.6.5.
Can CVE-2010-0211 be exploited remotely?
Yes, CVE-2010-0211 can be exploited by remote attackers using a specific modrdn call.
Is the exploitation of CVE-2010-0211 easy?
The exploitation of CVE-2010-0211 may not be trivial, but it poses a significant risk of denial of service.