Read the docs
TI-2007-05480 Aliases CVE-2007-5707GHSA-56rq-8cxr-3584

OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service (slapd crash)…

Priority LOW 38CWE-399Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Complete
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-399 and the CVSS impact.

Summary

OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service (slapd crash) via an LDAP request with a malformed objectClasses attribute. NOTE: this has been reported as a double free, but the reports are inconsistent.

Why it matters now

EPSS 0.03653 89th percentileScored 2026-11-07
Fix Fixed Red Hat: 2 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 119

CPEVersionsRoleVendor
cpe:2.3:a:openldap:openldap:1.0:*:*:*:*:*:*:*1.0Vulnerableopenldap
cpe:2.3:a:openldap:openldap:1.0.1:*:*:*:*:*:*:*1.0.1Vulnerableopenldap
cpe:2.3:a:openldap:openldap:1.0.2:*:*:*:*:*:*:*1.0.2Vulnerableopenldap
cpe:2.3:a:openldap:openldap:1.0.3:*:*:*:*:*:*:*1.0.3Vulnerableopenldap
cpe:2.3:a:openldap:openldap:1.1:*:*:*:*:*:*:*1.1Vulnerableopenldap
cpe:2.3:a:openldap:openldap:1.1.0:*:*:*:*:*:*:*1.1.0Vulnerableopenldap
cpe:2.3:a:openldap:openldap:1.1.1:*:*:*:*:*:*:*1.1.1Vulnerableopenldap
cpe:2.3:a:openldap:openldap:1.1.2:*:*:*:*:*:*:*1.1.2Vulnerableopenldap
cpe:2.3:a:openldap:openldap:1.1.3:*:*:*:*:*:*:*1.1.3Vulnerableopenldap
cpe:2.3:a:openldap:openldap:1.1.4:*:*:*:*:*:*:*1.1.4Vulnerableopenldap
  • cpe:2.3:a:openldap:openldap:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:1.0.3:*:*:*:*:*:*:* Versions 1.0.3 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:1.1.0:*:*:*:*:*:*:* Versions 1.1.0 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:1.1.1:*:*:*:*:*:*:* Versions 1.1.1 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:1.1.2:*:*:*:*:*:*:* Versions 1.1.2 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:1.1.3:*:*:*:*:*:*:* Versions 1.1.3 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:1.1.4:*:*:*:*:*:*:* Versions 1.1.4 Vulnerable ·openldap
Show 109 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:openldap:openldap:1.2:*:*:*:*:*:*:*1.2Vulnerableopenldap
cpe:2.3:a:openldap:openldap:1.2.0:*:*:*:*:*:*:*1.2.0Vulnerableopenldap
cpe:2.3:a:openldap:openldap:1.2.1:*:*:*:*:*:*:*1.2.1Vulnerableopenldap
cpe:2.3:a:openldap:openldap:1.2.2:*:*:*:*:*:*:*1.2.2Vulnerableopenldap
cpe:2.3:a:openldap:openldap:1.2.3:*:*:*:*:*:*:*1.2.3Vulnerableopenldap
cpe:2.3:a:openldap:openldap:1.2.4:*:*:*:*:*:*:*1.2.4Vulnerableopenldap
cpe:2.3:a:openldap:openldap:1.2.5:*:*:*:*:*:*:*1.2.5Vulnerableopenldap
cpe:2.3:a:openldap:openldap:1.2.6:*:*:*:*:*:*:*1.2.6Vulnerableopenldap
cpe:2.3:a:openldap:openldap:1.2.7:*:*:*:*:*:*:*1.2.7Vulnerableopenldap
cpe:2.3:a:openldap:openldap:1.2.8:*:*:*:*:*:*:*1.2.8Vulnerableopenldap
cpe:2.3:a:openldap:openldap:1.2.9:*:*:*:*:*:*:*1.2.9Vulnerableopenldap
cpe:2.3:a:openldap:openldap:1.2.10:*:*:*:*:*:*:*1.2.10Vulnerableopenldap
cpe:2.3:a:openldap:openldap:1.2.11:*:*:*:*:*:*:*1.2.11Vulnerableopenldap
cpe:2.3:a:openldap:openldap:1.2.12:*:*:*:*:*:*:*1.2.12Vulnerableopenldap
cpe:2.3:a:openldap:openldap:1.2.13:*:*:*:*:*:*:*1.2.13Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0:*:*:*:*:*:*:*2.0Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.0:*:*:*:*:*:*:*2.0.0Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.1:*:*:*:*:*:*:*2.0.1Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.2:*:*:*:*:*:*:*2.0.2Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.3:*:*:*:*:*:*:*2.0.3Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.4:*:*:*:*:*:*:*2.0.4Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.5:*:*:*:*:*:*:*2.0.5Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.6:*:*:*:*:*:*:*2.0.6Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.7:*:*:*:*:*:*:*2.0.7Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.8:*:*:*:*:*:*:*2.0.8Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.9:*:*:*:*:*:*:*2.0.9Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.10:*:*:*:*:*:*:*2.0.10Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.11:*:*:*:*:*:*:*2.0.11Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.11_9:*:*:*:*:*:*:*2.0.11_9Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.11_11:*:*:*:*:*:*:*2.0.11_11Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.11_11s:*:*:*:*:*:*:*2.0.11_11sVulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.12:*:*:*:*:*:*:*2.0.12Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.13:*:*:*:*:*:*:*2.0.13Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.14:*:*:*:*:*:*:*2.0.14Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.15:*:*:*:*:*:*:*2.0.15Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.16:*:*:*:*:*:*:*2.0.16Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.17:*:*:*:*:*:*:*2.0.17Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.18:*:*:*:*:*:*:*2.0.18Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.19:*:*:*:*:*:*:*2.0.19Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.20:*:*:*:*:*:*:*2.0.20Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.21:*:*:*:*:*:*:*2.0.21Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.22:*:*:*:*:*:*:*2.0.22Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.23:*:*:*:*:*:*:*2.0.23Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.24:*:*:*:*:*:*:*2.0.24Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.25:*:*:*:*:*:*:*2.0.25Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.26:*:*:*:*:*:*:*2.0.26Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.0.27:*:*:*:*:*:*:*2.0.27Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.2:*:*:*:*:*:*:*2.1.2Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.3:*:*:*:*:*:*:*2.1.3Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.4:*:*:*:*:*:*:*2.1.4Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.5:*:*:*:*:*:*:*2.1.5Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.6:*:*:*:*:*:*:*2.1.6Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.7:*:*:*:*:*:*:*2.1.7Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.8:*:*:*:*:*:*:*2.1.8Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.9:*:*:*:*:*:*:*2.1.9Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.10:*:*:*:*:*:*:*2.1.10Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.11:*:*:*:*:*:*:*2.1.11Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.12:*:*:*:*:*:*:*2.1.12Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.13:*:*:*:*:*:*:*2.1.13Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.14:*:*:*:*:*:*:*2.1.14Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.15:*:*:*:*:*:*:*2.1.15Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.16:*:*:*:*:*:*:*2.1.16Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.17:*:*:*:*:*:*:*2.1.17Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.18:*:*:*:*:*:*:*2.1.18Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.19:*:*:*:*:*:*:*2.1.19Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.20:*:*:*:*:*:*:*2.1.20Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.21:*:*:*:*:*:*:*2.1.21Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.22:*:*:*:*:*:*:*2.1.22Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.23:*:*:*:*:*:*:*2.1.23Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.24:*:*:*:*:*:*:*2.1.24Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.25:*:*:*:*:*:*:*2.1.25Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.26:*:*:*:*:*:*:*2.1.26Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.27:*:*:*:*:*:*:*2.1.27Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.28:*:*:*:*:*:*:*2.1.28Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.29:*:*:*:*:*:*:*2.1.29Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1.30:*:*:*:*:*:*:*2.1.30Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.1_.20:*:*:*:*:*:*:*2.1_.20Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.0:*:*:*:*:*:*:*2.2.0Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.1:*:*:*:*:*:*:*2.2.1Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.4:*:*:*:*:*:*:*2.2.4Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.5:*:*:*:*:*:*:*2.2.5Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.6:*:*:*:*:*:*:*2.2.6Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.7:*:*:*:*:*:*:*2.2.7Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.8:*:*:*:*:*:*:*2.2.8Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.9:*:*:*:*:*:*:*2.2.9Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.10:*:*:*:*:*:*:*2.2.10Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.11:*:*:*:*:*:*:*2.2.11Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.12:*:*:*:*:*:*:*2.2.12Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.13:*:*:*:*:*:*:*2.2.13Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.14:*:*:*:*:*:*:*2.2.14Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.15:*:*:*:*:*:*:*2.2.15Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.16:*:*:*:*:*:*:*2.2.16Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.17:*:*:*:*:*:*:*2.2.17Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.18:*:*:*:*:*:*:*2.2.18Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.19:*:*:*:*:*:*:*2.2.19Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.20:*:*:*:*:*:*:*2.2.20Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.21:*:*:*:*:*:*:*2.2.21Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.22:*:*:*:*:*:*:*2.2.22Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.23:*:*:*:*:*:*:*2.2.23Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.24:*:*:*:*:*:*:*2.2.24Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.25:*:*:*:*:*:*:*2.2.25Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.26:*:*:*:*:*:*:*2.2.26Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.27:*:*:*:*:*:*:*2.2.27Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.28_r2:*:*:*:*:*:*:*2.2.28_r2Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.2.29_rev_1.134:*:*:*:*:*:*:*2.2.29_rev_1.134Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.3.27_2.20061018:*:*:*:*:*:*:*2.3.27_2.20061018Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.3.28_2.20061022:*:*:*:*:*:*:*2.3.28_2.20061022Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.3.28_20061022:*:*:*:*:*:*:*2.3.28_20061022Vulnerableopenldap
cpe:2.3:a:openldap:openldap:2.3.28_e1.0.0:*:*:*:*:*:*:*2.3.28_e1.0.0Vulnerableopenldap
  • cpe:2.3:a:openldap:openldap:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:1.2.0:*:*:*:*:*:*:* Versions 1.2.0 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:1.2.1:*:*:*:*:*:*:* Versions 1.2.1 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:1.2.2:*:*:*:*:*:*:* Versions 1.2.2 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:1.2.3:*:*:*:*:*:*:* Versions 1.2.3 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:1.2.4:*:*:*:*:*:*:* Versions 1.2.4 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:1.2.5:*:*:*:*:*:*:* Versions 1.2.5 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:1.2.6:*:*:*:*:*:*:* Versions 1.2.6 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:1.2.7:*:*:*:*:*:*:* Versions 1.2.7 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:1.2.8:*:*:*:*:*:*:* Versions 1.2.8 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:1.2.9:*:*:*:*:*:*:* Versions 1.2.9 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:1.2.10:*:*:*:*:*:*:* Versions 1.2.10 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:1.2.11:*:*:*:*:*:*:* Versions 1.2.11 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:1.2.12:*:*:*:*:*:*:* Versions 1.2.12 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:1.2.13:*:*:*:*:*:*:* Versions 1.2.13 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.0:*:*:*:*:*:*:* Versions 2.0.0 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.2:*:*:*:*:*:*:* Versions 2.0.2 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.3:*:*:*:*:*:*:* Versions 2.0.3 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.4:*:*:*:*:*:*:* Versions 2.0.4 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.5:*:*:*:*:*:*:* Versions 2.0.5 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.6:*:*:*:*:*:*:* Versions 2.0.6 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.7:*:*:*:*:*:*:* Versions 2.0.7 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.8:*:*:*:*:*:*:* Versions 2.0.8 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.9:*:*:*:*:*:*:* Versions 2.0.9 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.10:*:*:*:*:*:*:* Versions 2.0.10 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.11:*:*:*:*:*:*:* Versions 2.0.11 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.11_9:*:*:*:*:*:*:* Versions 2.0.11_9 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.11_11:*:*:*:*:*:*:* Versions 2.0.11_11 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.11_11s:*:*:*:*:*:*:* Versions 2.0.11_11s Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.12:*:*:*:*:*:*:* Versions 2.0.12 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.13:*:*:*:*:*:*:* Versions 2.0.13 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.14:*:*:*:*:*:*:* Versions 2.0.14 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.15:*:*:*:*:*:*:* Versions 2.0.15 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.16:*:*:*:*:*:*:* Versions 2.0.16 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.17:*:*:*:*:*:*:* Versions 2.0.17 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.18:*:*:*:*:*:*:* Versions 2.0.18 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.19:*:*:*:*:*:*:* Versions 2.0.19 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.20:*:*:*:*:*:*:* Versions 2.0.20 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.21:*:*:*:*:*:*:* Versions 2.0.21 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.22:*:*:*:*:*:*:* Versions 2.0.22 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.23:*:*:*:*:*:*:* Versions 2.0.23 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.24:*:*:*:*:*:*:* Versions 2.0.24 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.25:*:*:*:*:*:*:* Versions 2.0.25 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.26:*:*:*:*:*:*:* Versions 2.0.26 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.0.27:*:*:*:*:*:*:* Versions 2.0.27 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.2:*:*:*:*:*:*:* Versions 2.1.2 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.3:*:*:*:*:*:*:* Versions 2.1.3 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.4:*:*:*:*:*:*:* Versions 2.1.4 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.5:*:*:*:*:*:*:* Versions 2.1.5 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.6:*:*:*:*:*:*:* Versions 2.1.6 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.7:*:*:*:*:*:*:* Versions 2.1.7 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.8:*:*:*:*:*:*:* Versions 2.1.8 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.9:*:*:*:*:*:*:* Versions 2.1.9 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.10:*:*:*:*:*:*:* Versions 2.1.10 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.11:*:*:*:*:*:*:* Versions 2.1.11 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.12:*:*:*:*:*:*:* Versions 2.1.12 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.13:*:*:*:*:*:*:* Versions 2.1.13 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.14:*:*:*:*:*:*:* Versions 2.1.14 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.15:*:*:*:*:*:*:* Versions 2.1.15 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.16:*:*:*:*:*:*:* Versions 2.1.16 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.17:*:*:*:*:*:*:* Versions 2.1.17 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.18:*:*:*:*:*:*:* Versions 2.1.18 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.19:*:*:*:*:*:*:* Versions 2.1.19 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.20:*:*:*:*:*:*:* Versions 2.1.20 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.21:*:*:*:*:*:*:* Versions 2.1.21 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.22:*:*:*:*:*:*:* Versions 2.1.22 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.23:*:*:*:*:*:*:* Versions 2.1.23 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.24:*:*:*:*:*:*:* Versions 2.1.24 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.25:*:*:*:*:*:*:* Versions 2.1.25 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.26:*:*:*:*:*:*:* Versions 2.1.26 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.27:*:*:*:*:*:*:* Versions 2.1.27 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.28:*:*:*:*:*:*:* Versions 2.1.28 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.29:*:*:*:*:*:*:* Versions 2.1.29 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1.30:*:*:*:*:*:*:* Versions 2.1.30 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.1_.20:*:*:*:*:*:*:* Versions 2.1_.20 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.0:*:*:*:*:*:*:* Versions 2.2.0 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.1:*:*:*:*:*:*:* Versions 2.2.1 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.4:*:*:*:*:*:*:* Versions 2.2.4 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.5:*:*:*:*:*:*:* Versions 2.2.5 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.6:*:*:*:*:*:*:* Versions 2.2.6 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.7:*:*:*:*:*:*:* Versions 2.2.7 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.8:*:*:*:*:*:*:* Versions 2.2.8 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.9:*:*:*:*:*:*:* Versions 2.2.9 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.10:*:*:*:*:*:*:* Versions 2.2.10 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.11:*:*:*:*:*:*:* Versions 2.2.11 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.12:*:*:*:*:*:*:* Versions 2.2.12 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.13:*:*:*:*:*:*:* Versions 2.2.13 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.14:*:*:*:*:*:*:* Versions 2.2.14 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.15:*:*:*:*:*:*:* Versions 2.2.15 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.16:*:*:*:*:*:*:* Versions 2.2.16 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.17:*:*:*:*:*:*:* Versions 2.2.17 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.18:*:*:*:*:*:*:* Versions 2.2.18 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.19:*:*:*:*:*:*:* Versions 2.2.19 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.20:*:*:*:*:*:*:* Versions 2.2.20 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.21:*:*:*:*:*:*:* Versions 2.2.21 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.22:*:*:*:*:*:*:* Versions 2.2.22 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.23:*:*:*:*:*:*:* Versions 2.2.23 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.24:*:*:*:*:*:*:* Versions 2.2.24 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.25:*:*:*:*:*:*:* Versions 2.2.25 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.26:*:*:*:*:*:*:* Versions 2.2.26 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.27:*:*:*:*:*:*:* Versions 2.2.27 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.28_r2:*:*:*:*:*:*:* Versions 2.2.28_r2 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.2.29_rev_1.134:*:*:*:*:*:*:* Versions 2.2.29_rev_1.134 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.3.27_2.20061018:*:*:*:*:*:*:* Versions 2.3.27_2.20061018 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.3.28_2.20061022:*:*:*:*:*:*:* Versions 2.3.28_2.20061022 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.3.28_20061022:*:*:*:*:*:*:* Versions 2.3.28_20061022 Vulnerable ·openldap
  • cpe:2.3:a:openldap:openldap:2.3.28_e1.0.0:*:*:*:*:*:*:* Versions 2.3.28_e1.0.0 Vulnerable ·openldap

Remediation

Red Hat 2 advisories

  • RHSA-2007:1038 Released 2007-11-15 · Red Hat rating Moderate
    openldap security and enhancement update
    • Red Hat Enterprise Linux AS version 4 compat-openldap-2.1.30-8.el4_6.1, compat-openldap-2.1.30-8.el4_6.1.i386, compat-openldap-2.1.30-8.el4_6.1.ia64 +21
    • Red Hat Enterprise Linux Desktop version 4 compat-openldap-2.1.30-8.el4_6.1, compat-openldap-2.1.30-8.el4_6.1.i386, openldap-2.2.13-8.el4_6.1 +9
    • Red Hat Enterprise Linux ES version 4 compat-openldap-2.1.30-8.el4_6.1, compat-openldap-2.1.30-8.el4_6.1.i386, compat-openldap-2.1.30-8.el4_6.1.ia64 +15
    • Red Hat Enterprise Linux WS version 4 compat-openldap-2.1.30-8.el4_6.1, compat-openldap-2.1.30-8.el4_6.1.i386, compat-openldap-2.1.30-8.el4_6.1.ia64 +15
  • RHSA-2007:1037 Released 2007-11-08 · Red Hat rating Important
    openldap security and enhancement update
    • Red Hat Enterprise Linux (v. 5 server) compat-openldap-2.3.27_2.2.29-8.el5_1.1, compat-openldap-2.3.27_2.2.29-8.el5_1.1.i386, compat-openldap-2.3.27_2.2.29-8.el5_1.1.ia64 +21
    • Red Hat Enterprise Linux Desktop (v. 5 client) compat-openldap-2.3.27_2.2.29-8.el5_1.1, compat-openldap-2.3.27_2.2.29-8.el5_1.1.i386, openldap-2.3.27-8.el5_1.1 +3
    • Red Hat Enterprise Linux Desktop Workstation (v. 5 client) openldap-2.3.27-8.el5_1.1, openldap-devel-2.3.27-8.el5_1.1, openldap-devel-2.3.27-8.el5_1.1.i386 +4

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2007:1037
Red Hat Enterprise Linux AS version 4Fixed RHSA-2007:1038
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2007:1037
Red Hat Enterprise Linux Desktop Workstation (v. 5 client)Fixed RHSA-2007:1037
Red Hat Enterprise Linux Desktop version 4Fixed RHSA-2007:1038
Red Hat Enterprise Linux ES version 4Fixed RHSA-2007:1038
Red Hat Enterprise Linux WS version 4Fixed RHSA-2007:1038

Timeline

  1. 2026-10-02 Threatist record created from CVE-2007-5707
  2. 2026-10-03 Alias added: GHSA-56rq-8cxr-3584

References

Patch 1

Advisory 11

Other 4

  • TI-2022-11700 In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability… CVSS 3.1CRITICAL 9.8
  • TI-2020-18548 An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in… CVSS 3.1HIGH 7.5
  • TI-2020-18541 An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in… CVSS 3.1HIGH 7.5
  • TI-2020-18547 A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with… CVSS 3.1HIGH 7.5
  • TI-2020-18542 A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd… CVSS 3.1HIGH 7.5
  • TI-2006-05563 OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon… CVSS 3.1HIGH 7.5
See all 58 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences