CVE-2010-0212: Null Pointer Dereference
OpenLDAP 2.4.22 allows remote attackers to cause a denial of service (crash) via a modrdn call with a zero-length RDN destination string, which is not properly handled by the smrnormalize function and triggers a NULL pointer dereference in the IA5StringNormalize function in schemainit.c, as demonstrated using the Codenomicon LDAPv3 test suite.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0212?
CVE-2010-0212 has a medium severity rating as it can lead to denial of service due to a crash.
How do I fix CVE-2010-0212?
To fix CVE-2010-0212, upgrade to a patched version of OpenLDAP above 2.4.22.
What does CVE-2010-0212 affect?
CVE-2010-0212 affects OpenLDAP version 2.4.22, allowing possible remote attacks.
Can CVE-2010-0212 be exploited remotely?
Yes, CVE-2010-0212 can be exploited remotely via a crafted modrdn call.
What is the impact of CVE-2010-0212?
The impact of CVE-2010-0212 is a denial of service which may cause the OpenLDAP server to crash.