CVE-2007-6698
The BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a...
4.0 Medium
The BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a denial of service (crash) via a potentially-successful modify operation with the NOOP control set to critical, possibly due to a double free vulnerability.
Exploit likelihood
2.04%Down 0.5 points since Feb 4, 2022
What each source reports
NVD Score used
The BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a denial of service (crash) via a potentially-successful modify operation with the NOOP control set to critical, possibly due to a double free vulnerability.
- Record
CVE-2007-6698- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
The BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a denial of service (crash) via a potentially-successful modify operation with the NOOP control set to critical, possibly due to a double free vulnerability.
- Record
CVE-2007-6698- Updated
- 2026-11-02
EUVDEUVD-2007-6662 No score
The BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a denial of service (crash) via a potentially-successful modify operation with the NOOP control set to critical, possibly due to a double free vulnerability.
- Record
EUVD-2007-6662- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9xcf-r85j-w8gv No score
The BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a...
The BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a denial of service (crash) via a potentially-successful modify operation with the NOOP control set to critical, possibly due to a double free vulnerability.
- Record
GHSA-9xcf-r85j-w8gv- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openldap2.3Debian:4.0 From an advisory covering 4 CVEs |
before 2.3.30-5+etch1, plus listed versions 2.3.30-5 |
2.3.30-5+etch1 |
compat-openldapRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:2.1.30-8.el4_6.4 | 0:2.1.30-8.el4_6.4 |
openldapRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-clientsRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-develRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-serversRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-servers-sqlRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
compat-openldapRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:2.1.30-8.el4_6.4 | 0:2.1.30-8.el4_6.4 |
openldapRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
Show 35 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openldap-clientsRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-develRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-serversRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-servers-sqlRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
compat-openldapRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:2.1.30-8.el4_6.4 | 0:2.1.30-8.el4_6.4 |
openldapRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-clientsRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-develRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-serversRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-servers-sqlRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
compat-openldapRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:2.1.30-8.el4_6.4 | 0:2.1.30-8.el4_6.4 |
openldapRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-clientsRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-develRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-serversRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-servers-sqlRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
openldap-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
openldap-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
openldap-serversRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
openldap-servers-sqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
compat-openldapRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:2.3.27_2.2.29-8.el5_1.3 | 0:2.3.27_2.2.29-8.el5_1.3 |
openldapRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
openldap-clientsRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
openldap-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
compat-openldapRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.3.27_2.2.29-8.el5_1.3 | 0:2.3.27_2.2.29-8.el5_1.3 |
openldapRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
openldap-clientsRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
openldap-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
openldap-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
openldap-serversRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
openldap-servers-sqlRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-6698 is a medium vulnerability (CVSS 4.0) in Openldap, published February 1, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.04%, the 81st percentile. No source names a fixed version.
References
lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html
mandriva.com/security/advisories?name=MDVSA-2008:058
secunia.com/advisories/29225
securitytracker.com/id?1019480
openldap.org/lists/openldap-bugs/200704/msg00067.html
Show 30 moreShow less
wiki.rpath.com/Advisories:rPSA-2008-0059
securityfocus.com/archive/1/488242/100/200/threaded
bugzilla.redhat.com/show_bug.cgi?id=431203
ubuntu.com/usn/usn-584-1
redhat.com/support/errata/RHSA-2008-0110.html
debian.org/security/2008/dsa-1541
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10748
vupen.com/english/advisories/2009/3184
lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
support.apple.com/kb/HT3937
nvd.nist.gov/vuln/detail/CVE-2007-6698
github.com/advisories/GHSA-9xcf-r85j-w8gv
access.redhat.com/errata/RHSA-2008:0110
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0110.json
cve.org/CVERecord?id=CVE-2007-6698