OpenLDAP Double Free Vulnerability in Versions 2.4.44 and Earlier
Summary
ALPINE-CVE-2017-9287: servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. Affects openldap versions < 2.4.44-r5. Fixed in 2.4.44-r5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenLDAP is an open-source implementation of the Lightweight Directory Access Protocol (LDAP), which is used for accessing and maintaining distributed directory information services over an Internet Protocol (IP) network. It is widely utilized in various applications for user authentication and directory services. The vulnerability in question affects OpenLDAP versions up to 2.4.44, where a flaw in the search functionality can lead to a double free error, potentially crashing the server.
Vulnerability Detail
The vulnerability arises from a flaw in the search.c file within the slapd (standalone LDAP daemon) component of OpenLDAP. Specifically, it allows a user with access to search the directory to issue a search request that includes the Paged Results control with a page size of 0. This can trigger a double free condition, leading to a crash of the slapd service. The ramifications of this vulnerability include service disruption and potential denial of service for legitimate users. The CVSS score for this vulnerability is 6.5, indicating a moderate severity level.
How To Fix
Minimum fixed version
2.4.44-r5
This is the first release that contains the fix.
sudo apk add --upgrade openldapTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can restrict access to the LDAP service to trusted users only, minimizing the risk of exploitation until the package can be updated.
Conclusion
The OpenLDAP double free vulnerability poses a significant risk to services utilizing this software. It is crucial to update to the patched version to mitigate the risk of service disruption. Additionally, employing temporary workarounds can help safeguard against potential exploitation until the update is applied.
See every vulnerability recorded for openldap →
FAQ
The vulnerability is a double free error in OpenLDAP that can cause the slapd service to crash when a specific search request is made.
All versions of OpenLDAP up to and including 2.4.44 are affected by this vulnerability.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
If immediate updates are not possible, restrict access to the LDAP service to trusted users as a temporary measure.
The CVSS score of this vulnerability is 6.5, indicating a moderate severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for openldap.
