Description: Some vulnerabilities have been reported in OpenLDAP, which can be exploited by malicious users to cause a DoS (Denial of Service).
1) A vulnerability is caused due to the "add_filter_attrs()" function in servers/slapd/overlay/pcache.c not correctly NULL terminating "new_attrs", which can be exploited to crash slapd due to an out of bounds memory access.
Successful exploitation may require that slapd runs as proxy-caching server.
2) An error within the normalisation of "objectClasses" can be exploited to crash a vulnerable server by sending a malformed "objectClasses" attribute.
The vulnerabilities are reported in versions prior to 2.3.39.
3) An error when performing modify operations with a NOOP control on entries stored in the BDB backend can be exploited to crash the slapd daemon.
The vulnerability is reported in versions prior to 2.3.36.
Note: Several other bugs, which may have a security impact, were also reported.
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
