CVE-2007-5707

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-10-30 · updated 2026-06-16
Weakness: CWE-399

Description

OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service (slapd crash) via an LDAP request with a malformed objectClasses attribute. NOTE: this has been reported as a double free, but the reports are inconsistent.

Affected products

openldap: 1.0, 1.0.1, 1.0.2, 1.0.3, 1.1, 1.1.0 (+113)

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=440632
http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
http://secunia.com/advisories/27424
http://secunia.com/advisories/27587
http://secunia.com/advisories/27596
http://secunia.com/advisories/27683
http://secunia.com/advisories/27756
http://secunia.com/advisories/27868
http://secunia.com/advisories/29461
http://secunia.com/advisories/29682
http://security.gentoo.org/glsa/glsa-200803-28.xml
http://support.apple.com/kb/HT3937

Get alerted when CVE-2007-5707 or the next vulnerability affects your stack