CVE-2011-1081

modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of...

5.0 MediumPublic exploitFix available

modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service (daemon crash) via a relative Distinguished Name (DN) modification request (aka MODRDN operation) that contains an empty value for the OldDN field.

Exploit likelihood

14.5%Up 1.9 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2011-1081
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-399
Updated: 2026-11-02

CVE List No score

Record: CVE-2011-1081
Updated: 2026-11-02

EUVDEUVD-2011-1096 No score

Record: EUVD-2011-1096
Updated: 2026-11-03

GitHub AdvisoriesGHSA-697q-5f36-g4h9 No score

modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of...

Record: GHSA-697q-5f36-g4h9
Updated: 2026-11-02

OSV No score

Record: CVE-2011-1081
Updated: 2026-11-02

OSVDEBIAN-CVE-2011-1081 No score

Record: DEBIAN-CVE-2011-1081
Updated: 2026-11-02

Affected products

openldap

Affected packages

Affected packages
Package	Affected	Fixed
`openldap` Debian:12	before 2.4.25-1	2.4.25-1
`openldap` Debian:13	before 2.4.25-1	2.4.25-1
`openldap` Debian:14	before 2.4.25-1	2.4.25-1
`openldap` Red Hat:enterprise_linux:6::client	before 0:2.4.19-15.el6_0.2	0:2.4.19-15.el6_0.2
`openldap-debuginfo` Red Hat:enterprise_linux:6::client	before 0:2.4.19-15.el6_0.2	0:2.4.19-15.el6_0.2
`openldap-devel` Red Hat:enterprise_linux:6::client	before 0:2.4.19-15.el6_0.2	0:2.4.19-15.el6_0.2
`openldap-servers` Red Hat:enterprise_linux:6::client	before 0:2.4.19-15.el6_0.2	0:2.4.19-15.el6_0.2
`openldap-servers-sql` Red Hat:enterprise_linux:6::client	before 0:2.4.19-15.el6_0.2	0:2.4.19-15.el6_0.2
`compat-openldap` Red Hat:enterprise_linux:6::client	before 0:2.4.19_2.3.43-15.el6_0.2	0:2.4.19_2.3.43-15.el6_0.2
`openldap-clients` Red Hat:enterprise_linux:6::client	before 0:2.4.19-15.el6_0.2	0:2.4.19-15.el6_0.2

Show 21 moreShow less

Affected packages
Package	Affected	Fixed
`openldap` Red Hat:enterprise_linux:6::computenode	before 0:2.4.19-15.el6_0.2	0:2.4.19-15.el6_0.2
`openldap-clients` Red Hat:enterprise_linux:6::computenode	before 0:2.4.19-15.el6_0.2	0:2.4.19-15.el6_0.2
`openldap-debuginfo` Red Hat:enterprise_linux:6::computenode	before 0:2.4.19-15.el6_0.2	0:2.4.19-15.el6_0.2
`openldap-devel` Red Hat:enterprise_linux:6::computenode	before 0:2.4.19-15.el6_0.2	0:2.4.19-15.el6_0.2
`openldap-servers` Red Hat:enterprise_linux:6::computenode	before 0:2.4.19-15.el6_0.2	0:2.4.19-15.el6_0.2
`openldap-servers-sql` Red Hat:enterprise_linux:6::computenode	before 0:2.4.19-15.el6_0.2	0:2.4.19-15.el6_0.2
`compat-openldap` Red Hat:enterprise_linux:6::computenode	before 0:2.4.19_2.3.43-15.el6_0.2	0:2.4.19_2.3.43-15.el6_0.2
`openldap` Red Hat:enterprise_linux:6::server	before 0:2.4.19-15.el6_0.2	0:2.4.19-15.el6_0.2
`openldap-debuginfo` Red Hat:enterprise_linux:6::server	before 0:2.4.19-15.el6_0.2	0:2.4.19-15.el6_0.2
`openldap-servers-sql` Red Hat:enterprise_linux:6::server	before 0:2.4.19-15.el6_0.2	0:2.4.19-15.el6_0.2
`compat-openldap` Red Hat:enterprise_linux:6::server	before 0:2.4.19_2.3.43-15.el6_0.2	0:2.4.19_2.3.43-15.el6_0.2
`openldap-clients` Red Hat:enterprise_linux:6::server	before 0:2.4.19-15.el6_0.2	0:2.4.19-15.el6_0.2
`openldap-devel` Red Hat:enterprise_linux:6::server	before 0:2.4.19-15.el6_0.2	0:2.4.19-15.el6_0.2
`openldap-servers` Red Hat:enterprise_linux:6::server	before 0:2.4.19-15.el6_0.2	0:2.4.19-15.el6_0.2
`openldap` Red Hat:enterprise_linux:6::workstation	before 0:2.4.19-15.el6_0.2	0:2.4.19-15.el6_0.2
`openldap-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:2.4.19-15.el6_0.2	0:2.4.19-15.el6_0.2
`openldap-servers-sql` Red Hat:enterprise_linux:6::workstation	before 0:2.4.19-15.el6_0.2	0:2.4.19-15.el6_0.2
`compat-openldap` Red Hat:enterprise_linux:6::workstation	before 0:2.4.19_2.3.43-15.el6_0.2	0:2.4.19_2.3.43-15.el6_0.2
`openldap-clients` Red Hat:enterprise_linux:6::workstation	before 0:2.4.19-15.el6_0.2	0:2.4.19-15.el6_0.2
`openldap-devel` Red Hat:enterprise_linux:6::workstation	before 0:2.4.19-15.el6_0.2	0:2.4.19-15.el6_0.2
`openldap-servers` Red Hat:enterprise_linux:6::workstation	before 0:2.4.19-15.el6_0.2	0:2.4.19-15.el6_0.2

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	OpenLDAP 2.4.x - 'modrdn' NULL OldDN Remote Denial of Service	2011-01-03

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-1081 is a medium vulnerability (CVSS 5.0) in Openldap, published March 20, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 14.5%, the 96th percentile. Fixed in openldap 2.4.25-1.

References

Show 30 moreShow less