CVE-2015-1545 json
The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial…
published 2015-02-12 11 y ago modified 2026-06-17 4 mo ago also EUVD-2015-1679
- cvss
- 5.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 11.1%
- EPSS 11.1% chance of exploitation in 30 days, percentile 95%
- public exploits
- 0
- none known
Summary
The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an empty attribute list in a deref control in a search request.
Patch / fix
- openldap Debian 14, Debian 13, Debian 12 2.4.40-4
debian advisories DEBIAN-CVE-2015-1545
- openldap Ubuntu 14.04 LTS 2.4.31-1+nmu2ubuntu8.1
ubuntu advisories UBUNTU-CVE-2015-1545
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- openldap2 SLES for SAP 12, SLES 12, SLE Software Development Kit 12 +1 more 2.4.39-16.1
- openldap2-client SLES for SAP 12, SLES 12, SLED 12 +1 more 2.4.39-16.1
suse advisories SUSE-SU-2015:1077-1
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2015-1545 updated cvss 5.0
openldap: slapd crashes on search with deref control and empty attr list
-
Red Hat Enterprise Linux 5 openldap Red Hat Enterprise Linux 6 openldap, compat-openldap, openldap-clients, openldap-servers, openldap-servers-sql Red Hat Enterprise Linux 7 openldap, openldap-clients, openldap-servers, openldap-servers-sql Red Hat JBoss Enterprise Application Platform 5 openldap Red Hat JBoss Enterprise Application Platform 6 openldapnot affected: vulnerable code not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
11.09% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- openldap.org http://www.openldap.org/its/?findid=8027 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P |
References
-
openldap.org
/its/?findid=8027
exploit, vendor-advisory
-
debian.org
/security/2015/dsa-3209
vendor-advisory
-
lists.apple.com
/archives/security-announce/2015/Apr/msg00001.html
vendor-advisory
-
lists.opensuse.org
/opensuse-updates/2015-07/msg00069.html
vendor-advisory
-
mandriva.com
/security/advisories?name=MDVSA-2015:073
vendor-advisory
-
mandriva.com
/security/advisories?name=MDVSA-2015:074
vendor-advisory
-
securityfocus.com
/bid/72519
vdb-entry
- openldap.org /devel/gitweb.cgi?p=openldap.git%3Ba=commit%3Bh=c32e74763f77675b9e144126e375977ed6dc562c
- support.apple.com /HT204659
-
exchange.xforce.ibmcloud.com
/vulnerabilities/100937
vdb-entry
- bugs.debian.org /cgi-bin/bugreport.cgi?bug=776988
- oracle.com /technetwork/topics/security/bulletinjul2015-2511963.html
-
securitytracker.com
/id/1032399
vdb-entry
-
secunia.com
/advisories/62787
third-party-advisory
-
openwall.com
/lists/oss-security/2015/02/07/3
mailing-list
- support.apple.com /kb/HT210788
-
seclists.org
/bugtraq/2019/Dec/23
mailing-list
-
seclists.org
/fulldisclosure/2019/Dec/26
mailing-list
Sources
- CVE List CVE-2015-1545
- NVD CVE-2015-1545
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.