What’s Vulnerable › Vulnerabilities

CVE-2010-0211

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 28.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2010-07-27 · updated 2026-06-16
• Weakness: CWE-252

Description

The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN string containing invalid UTF-8 sequences, which triggers a free of an invalid, uninitialized pointer in the slap_mods_free function, as demonstrated using the Codenomicon LDAPv3 test suite.

Affected products

• macOS: from 10.6.0 before 10.6.5 — fixed in 10.6.5
• Apple Mac Os X Server: from 10.6.0 before 10.6.5 — fixed in 10.6.5
• openldap: 2.4.22 (and their updates)
• Opensuse: 11.0 (and their updates)
• VMware ESXi: 4.0, 4.1 (and their updates)

How to fix

Upgrade to a fixed version: macOS 10.6.5; Apple Mac Os X Server 10.6.5. Check the vendor advisory for mitigations.

References

• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
• http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
• http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
• http://secunia.com/advisories/40639
• http://secunia.com/advisories/40677
• http://secunia.com/advisories/40687
• http://secunia.com/advisories/42787
• http://security.gentoo.org/glsa/glsa-201406-36.xml
• http://support.apple.com/kb/HT4435
• http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6570
• http://www.redhat.com/support/errata/RHSA-2010-0542.html
• http://www.redhat.com/support/errata/RHSA-2010-0543.html

Get alerted when CVE-2010-0211 or the next vulnerability affects your stack