ByteOS Network

CVE Vulnerability Details :

CVE-2013-4449

PUBLISHED

More Info Official Page

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-05 Feb, 2014 | 18:00

Updated At-06 Aug, 2024 | 16:45

▼CVE Numbering Authority (CNA)

The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service (slapd crash) by unbinding immediately after a search request, which triggers rwm_conn_destroy to free the session context while it is being used by rwm_op_search.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
http://www.openldap.org/its/index.cgi/Incoming?id=7723	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=MDVSA-2014:026	vendor-advisory x_refsource_MANDRIVA
https://bugzilla.redhat.com/show_bug.cgi?id=1019490	x_refsource_CONFIRM
http://www.debian.org/security/2015/dsa-3209	vendor-advisory x_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2014-0126.html	vendor-advisory x_refsource_REDHAT
http://www.openwall.com/lists/oss-security/2013/10/19/3	mailing-list x_refsource_MLIST
http://rhn.redhat.com/errata/RHSA-2014-0206.html	vendor-advisory x_refsource_REDHAT
http://www.securityfocus.com/bid/63190	vdb-entry x_refsource_BID
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705	x_refsource_CONFIRM
http://www.securitytracker.com/id/1029711	vdb-entry x_refsource_SECTRACK
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-4449	vendor-advisory x_refsource_CISCO
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735	x_refsource_CONFIRM
https://support.apple.com/kb/HT210788	x_refsource_CONFIRM
https://seclists.org/bugtraq/2019/Dec/23	mailing-list x_refsource_BUGTRAQ
http://seclists.org/fulldisclosure/2019/Dec/26	mailing-list x_refsource_FULLDISC

Hyperlink: http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.openldap.org/its/index.cgi/Incoming?id=7723

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2014:026

Resource:

vendor-advisory

x_refsource_MANDRIVA

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1019490

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.debian.org/security/2015/dsa-3209

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://rhn.redhat.com/errata/RHSA-2014-0126.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.openwall.com/lists/oss-security/2013/10/19/3

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://rhn.redhat.com/errata/RHSA-2014-0206.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.securityfocus.com/bid/63190

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securitytracker.com/id/1029711

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-4449

Resource:

vendor-advisory

x_refsource_CISCO

Hyperlink: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735

Resource:

x_refsource_CONFIRM

Hyperlink: https://support.apple.com/kb/HT210788

Resource:

x_refsource_CONFIRM

Hyperlink: https://seclists.org/bugtraq/2019/Dec/23

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://seclists.org/fulldisclosure/2019/Dec/26

Resource:

mailing-list

x_refsource_FULLDISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM x_transferred
http://www.openldap.org/its/index.cgi/Incoming?id=7723	x_refsource_CONFIRM x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2014:026	vendor-advisory x_refsource_MANDRIVA x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=1019490	x_refsource_CONFIRM x_transferred
http://www.debian.org/security/2015/dsa-3209	vendor-advisory x_refsource_DEBIAN x_transferred
http://rhn.redhat.com/errata/RHSA-2014-0126.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.openwall.com/lists/oss-security/2013/10/19/3	mailing-list x_refsource_MLIST x_transferred
http://rhn.redhat.com/errata/RHSA-2014-0206.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.securityfocus.com/bid/63190	vdb-entry x_refsource_BID x_transferred
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705	x_refsource_CONFIRM x_transferred
http://www.securitytracker.com/id/1029711	vdb-entry x_refsource_SECTRACK x_transferred
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-4449	vendor-advisory x_refsource_CISCO x_transferred
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735	x_refsource_CONFIRM x_transferred
https://support.apple.com/kb/HT210788	x_refsource_CONFIRM x_transferred
https://seclists.org/bugtraq/2019/Dec/23	mailing-list x_refsource_BUGTRAQ x_transferred
http://seclists.org/fulldisclosure/2019/Dec/26	mailing-list x_refsource_FULLDISC x_transferred