Off-by-one error in the UTF8StringNormalize function in OpenLDAP 2.4.26 and earlier allows remote attackers to cause a denial of service (slapd crash) via a zero-length string that triggers a heap-based buffer overflow, as demonstrated using an empty postalAddressAttribute value in an LDIF entry.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2011-10-27T20:00:00

Updated: 2024-08-06T23:53:32.849Z

Reserved: 2011-10-18T00:00:00

Link: CVE-2011-4079

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2011-10-27T20:55:01.823

Modified: 2023-02-13T04:32:41.350

Link: CVE-2011-4079

cve-icon Redhat

Severity :

Publid Date: 2011-10-06T00:00:00Z

Links: CVE-2011-4079 - Bugzilla