tocsin

Debian/openldap: unknown

The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data

Action: Upgrade openldap to 2.4.42+dfsg-2 or later.

Affected

introducedfixedlast affected
02.4.42+dfsg-2-

Fixed versions

2.4.42+dfsg-2

Sources

published · modified · JSON