Every CVE Search/ Get API key

CVE-2014-8182

An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV...

7.5 HighFix available

An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS responses.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

3.09%Up 2.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS responses.

Record
CVE-2014-8182
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-193
Updated
2026-11-02
CVE List No score

An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS responses.

Record
CVE-2014-8182
Updated
2026-11-02
EUVDEUVD-2014-8023 No score

An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS responses.

Record
EUVD-2014-8023
Updated
2026-11-03
GitHub AdvisoriesGHSA-mr56-3w7m-88hw No score

An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV...

An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS responses.

Record
GHSA-mr56-3w7m-88hw
Updated
2026-11-02
OSVRHBA-2015:1292 3.7

Red Hat Bug Fix Advisory: openldap bug fix and enhancement update

Record
RHBA-2015:1292
CVSS 3.0
3.7 LowCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVRHSA-2015:2131 3.7

Red Hat Security Advisory: openldap security, bug fix, and enhancement update

Record
RHSA-2015:2131
CVSS 3.0
3.7 LowCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openldap-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:2.4.40-5.el6
0:2.4.40-5.el6
openldap-devel
Red Hat:enterprise_linux:6::client
 before 0:2.4.40-5.el6
0:2.4.40-5.el6
openldap-servers
Red Hat:enterprise_linux:6::client
 before 0:2.4.40-5.el6
0:2.4.40-5.el6
openldap-servers-sql
Red Hat:enterprise_linux:6::client
 before 0:2.4.40-5.el6
0:2.4.40-5.el6
openldap
Red Hat:enterprise_linux:6::client
 before 0:2.4.40-5.el6
0:2.4.40-5.el6
openldap-clients
Red Hat:enterprise_linux:6::client
 before 0:2.4.40-5.el6
0:2.4.40-5.el6
openldap-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:2.4.40-5.el6
0:2.4.40-5.el6
openldap-devel
Red Hat:enterprise_linux:6::computenode
 before 0:2.4.40-5.el6
0:2.4.40-5.el6
openldap-servers
Red Hat:enterprise_linux:6::computenode
 before 0:2.4.40-5.el6
0:2.4.40-5.el6
openldap-servers-sql
Red Hat:enterprise_linux:6::computenode
 before 0:2.4.40-5.el6
0:2.4.40-5.el6
Show 38 moreShow less
Affected packages
PackageAffectedFixed
openldap
Red Hat:enterprise_linux:6::computenode
 before 0:2.4.40-5.el6
0:2.4.40-5.el6
openldap-clients
Red Hat:enterprise_linux:6::computenode
 before 0:2.4.40-5.el6
0:2.4.40-5.el6
openldap-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:2.4.40-5.el6
0:2.4.40-5.el6
openldap-servers-sql
Red Hat:enterprise_linux:6::server
 before 0:2.4.40-5.el6
0:2.4.40-5.el6
openldap
Red Hat:enterprise_linux:6::server
 before 0:2.4.40-5.el6
0:2.4.40-5.el6
openldap-clients
Red Hat:enterprise_linux:6::server
 before 0:2.4.40-5.el6
0:2.4.40-5.el6
openldap-devel
Red Hat:enterprise_linux:6::server
 before 0:2.4.40-5.el6
0:2.4.40-5.el6
openldap-servers
Red Hat:enterprise_linux:6::server
 before 0:2.4.40-5.el6
0:2.4.40-5.el6
openldap-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:2.4.40-5.el6
0:2.4.40-5.el6
openldap-servers-sql
Red Hat:enterprise_linux:6::workstation
 before 0:2.4.40-5.el6
0:2.4.40-5.el6
openldap
Red Hat:enterprise_linux:6::workstation
 before 0:2.4.40-5.el6
0:2.4.40-5.el6
openldap-clients
Red Hat:enterprise_linux:6::workstation
 before 0:2.4.40-5.el6
0:2.4.40-5.el6
openldap-devel
Red Hat:enterprise_linux:6::workstation
 before 0:2.4.40-5.el6
0:2.4.40-5.el6
openldap-servers
Red Hat:enterprise_linux:6::workstation
 before 0:2.4.40-5.el6
0:2.4.40-5.el6
openldap-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:2.4.40-8.el7
0:2.4.40-8.el7
openldap-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:2.4.40-8.el7
0:2.4.40-8.el7
openldap-servers
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:2.4.40-8.el7
0:2.4.40-8.el7
openldap-servers-sql
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:2.4.40-8.el7
0:2.4.40-8.el7
openldap
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:2.4.40-8.el7
0:2.4.40-8.el7
openldap-clients
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:2.4.40-8.el7
0:2.4.40-8.el7
openldap-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:2.4.40-8.el7
0:2.4.40-8.el7
openldap-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:2.4.40-8.el7
0:2.4.40-8.el7
openldap-servers
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:2.4.40-8.el7
0:2.4.40-8.el7
openldap-servers-sql
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:2.4.40-8.el7
0:2.4.40-8.el7
openldap
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:2.4.40-8.el7
0:2.4.40-8.el7
openldap-clients
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:2.4.40-8.el7
0:2.4.40-8.el7
openldap-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:2.4.40-8.el7
0:2.4.40-8.el7
openldap-servers-sql
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:2.4.40-8.el7
0:2.4.40-8.el7
openldap
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:2.4.40-8.el7
0:2.4.40-8.el7
openldap-clients
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:2.4.40-8.el7
0:2.4.40-8.el7
openldap-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:2.4.40-8.el7
0:2.4.40-8.el7
openldap-servers
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:2.4.40-8.el7
0:2.4.40-8.el7
openldap-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:2.4.40-8.el7
0:2.4.40-8.el7
openldap-servers-sql
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:2.4.40-8.el7
0:2.4.40-8.el7
openldap
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:2.4.40-8.el7
0:2.4.40-8.el7
openldap-clients
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:2.4.40-8.el7
0:2.4.40-8.el7
openldap-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:2.4.40-8.el7
0:2.4.40-8.el7
openldap-servers
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:2.4.40-8.el7
0:2.4.40-8.el7

History

History
RecordedChangedSources
affected, facts
aliases, productsEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-8182 is a high vulnerability (CVSS 7.5) in Openldap, published January 2, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.09%, the 87th percentile. Fixed in openldap-debuginfo 0:2.4.40-5.el6.

References

Show 28 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open