Ralf Haferkamp

**Name of the Vulnerable Software and Affected Versions** OpenLDAP versions prior to 2.4.24 OpenLDAP versions 2.4.19 OpenLDAP version 2.4.35 and earlier **Description** The issue affects the confidentiality, integrity, and availability of protected information. Exploitation of the vulnerabilities can be done remotely. In OpenLDAP 2.4.x before 2.4.24, the modrdn.c in slapd allows remote attackers to cause a denial of service (daemon crash) via a relative Distinguished Name (DN) modification request that contains an empty value for the OldDN field. **Recommendations** For OpenLDAP versions prior to 2.4.24, update to version 2.4.24 or later. For OpenLDAP versions 2.4.19, update to a version later than 2.4.19. For OpenLDAP version 2.4.35 and earlier, update to version 2.4.35 or later. As a temporary workaround, consider restricting access to the vulnerable `modrdn` function until a patch is available.

Name of the Vulnerable Software and Affected Versions: OpenLDAP versions 2.3.39 through 2.3.40 OpenLDAP version 2.3.41 and earlier are not explicitly mentioned as non-vulnerable, but since 2.3.41 is mentioned as the version after which the issue is fixed in the context of the provided information, it implies versions prior to 2.3.41 are affected. Thus, simplifying the range: OpenLDAP versions prior to 2.3.41 Description: The issue allows remote authenticated users to cause a denial of service, potentially leading to disruption of protected information. This can be achieved through exploitation of multiple vulnerabilities in the OpenLDAP package, specifically in the BDB backend for slapd, via a modrdn operation with a NOOP control. The exploitation can be carried out remotely. Recommendations: For OpenLDAP versions prior to 2.3.41, update to version 2.3.41 or later to resolve the issue. As a temporary workaround, consider restricting access to the modrdn operation with a NOOP control until a patch is available.

**Name of the Vulnerable Software and Affected Versions** OpenLDAP versions 2.1.12 and earlier **Description** The issue allows remote attackers to cause a denial of service, potentially leading to disruption of protected information availability. This is due to the `ldbm back exop passwd` function in the back-ldbm backend attempting to free an uninitialized pointer when the `slap passwd parse` function does not return `LDAP SUCCESS`. **Recommendations** For OpenLDAP versions 2.1.12 and earlier, consider updating to a version later than 2.1.12 to resolve the issue. As a temporary workaround, consider restricting access to the `ldbm back exop passwd` function in the back-ldbm backend until a patch is available.