CVE-2017-9287: Double Free
servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access to search the directory can crash slapd by issuing a search including the Paged Results control with a page size of 0.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9287?
CVE-2017-9287 is classified as a moderate severity vulnerability due to the potential for denial of service.
How do I fix CVE-2017-9287?
To mitigate CVE-2017-9287, update OpenLDAP to version 2.4.45 or later where the vulnerability is resolved.
What systems are affected by CVE-2017-9287?
CVE-2017-9287 affects OpenLDAP versions up to 2.4.44 and specifically various versions of Debian and Red Hat Enterprise Linux.
What type of vulnerability is CVE-2017-9287?
CVE-2017-9287 is a double free vulnerability affecting the slapd daemon in OpenLDAP.
Can CVE-2017-9287 be exploited remotely?
An attacker with access to search the directory can exploit CVE-2017-9287 to crash the slapd service.