Every CVE Search/ Get API key

CVE-2007-5708

slapo-pcache (overlays/pcache.c) in slapd in OpenLDAP before 2.3.39, when running as a proxy...

7.1 HighFix available

slapo-pcache (overlays/pcache.c) in slapd in OpenLDAP before 2.3.39, when running as a proxy-caching server, allocates memory using a malloc variant instead of calloc, which prevents an array from being initialized properly and might allow attackers to cause a denial of service (segmentation fault) via unknown vectors that prevent the array from being null terminated.

Exploit likelihood

2.62%Down 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.1

slapo-pcache (overlays/pcache.c) in slapd in OpenLDAP before 2.3.39, when running as a proxy-caching server, allocates memory using a malloc variant instead of calloc, which prevents an array from being initialized properly and might allow attackers to cause a denial of service (segmentation fault) via unknown vectors that prevent the array from being null terminated.

Record
CVE-2007-5708
CVSS 2.0
7.1 HighAV:N/AC:M/Au:N/C:N/I:N/A:C
Weakness
CWE-399
Updated
2026-11-02
CVE List No score

slapo-pcache (overlays/pcache.c) in slapd in OpenLDAP before 2.3.39, when running as a proxy-caching server, allocates memory using a malloc variant instead of calloc, which prevents an array from being initialized properly and might allow attackers to cause a denial of service (segmentation fault) via unknown vectors that prevent the array from being null terminated.

Record
CVE-2007-5708
Updated
2026-11-02
EUVDEUVD-2007-5680 No score

slapo-pcache (overlays/pcache.c) in slapd in OpenLDAP before 2.3.39, when running as a proxy-caching server, allocates memory using a malloc variant instead of calloc, which prevents an array from being initialized properly and might allow attackers to cause a denial of service (segmentation fault) via unknown vectors that prevent the array from being null terminated.

Record
EUVD-2007-5680
Updated
2026-11-03
GitHub AdvisoriesGHSA-g9ph-57wj-hfcf No score

slapo-pcache (overlays/pcache.c) in slapd in OpenLDAP before 2.3.39, when running as a proxy...

slapo-pcache (overlays/pcache.c) in slapd in OpenLDAP before 2.3.39, when running as a proxy-caching server, allocates memory using a malloc variant instead of calloc, which prevents an array from being initialized properly and might allow attackers to cause a denial of service (segmentation fault) via unknown vectors that prevent the array from being null terminated.

Record
GHSA-g9ph-57wj-hfcf
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openldap2.3
Debian:4.0
From an advisory covering 4 CVEs
before 2.3.30-5+etch1, plus listed versions
2.3.30-5
2.3.30-5+etch1
openldap2.3
Debian:5.0
before 2.3.38-1+lenny1, plus listed versions
2.3.23-12.3.24-12.3.24-1+b12.3.24-22.3.25-1
Show 13 moreShow less
2.3.27-12.3.29-12.3.30-12.3.30-22.3.30-32.3.30-42.3.30-52.3.30-5+etch12.3.30-5+etch22.3.30-5+etch32.3.35-12.3.35-22.3.38-1
2.3.38-1+lenny1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
affected, aliases, facts, references, titleGitHub Advisories, OSV
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-5708 is a high vulnerability (CVSS 7.1) in Openldap, published October 30, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.62%, the 85th percentile. Fixed in openldap2.3 2.3.38-1+lenny1.

References

Show 13 moreShow less
MoveEnter Open