Evil-DB LogoEvil-DB
← All CVEs

CVE-2008-2952

medium · 5

liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via crafted ASN.1 BER datagrams that trigger an assertion error.

5
CVSS
13.2%
EPSS (exploit prob.)
96th
EPSS percentile
2008-07-01
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

CWE-399

Affected products

VendorProductAffected versions
openldapopenldap2.2.4
openldapopenldap2.2.5
openldapopenldap2.2.6
openldapopenldap2.2.7
openldapopenldap2.2.8
openldapopenldap2.2.9
openldapopenldap2.3.4
openldapopenldap2.3.5
openldapopenldap2.3.6
openldapopenldap2.3.7
openldapopenldap2.3.8
openldapopenldap2.3.9
openldapopenldap2.3.10
openldapopenldap2.3.11
openldapopenldap2.3.12
openldapopenldap2.3.13
openldapopenldap2.3.14
openldapopenldap2.3.15
openldapopenldap2.3.16
openldapopenldap2.3.17
openldapopenldap2.3.18
openldapopenldap2.3.19
openldapopenldap2.3.20
openldapopenldap2.3.21
openldapopenldap2.3.22
openldapopenldap2.3.23
openldapopenldap2.3.24
openldapopenldap2.3.25
openldapopenldap2.3.26
openldapopenldap2.3.27
openldapopenldap2.3.28
openldapopenldap2.3.29
openldapopenldap2.3.30
openldapopenldap2.3.31
openldapopenldap2.3.32
openldapopenldap2.3.33
openldapopenldap2.3.34
openldapopenldap2.3.35
openldapopenldap2.3.36
openldapopenldap2.3.37

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2008-2952