Critical 9.8Published Jul 28, 2010

CVE-2010-0211The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segme…

Updated under an hour ago (Nov 2, 2026, 12:23 AM ET)

Does this affect you?

It affects openldap and 4 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stackFree account, 3 products Every CVE for openldap Exploited in the last 30 days

The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN string containing invalid UTF-8 sequences, which triggers a free of an invalid, uninitialized pointer in the slap_mods_free function, as demonstrated using the Codenomicon LDAPv3 test suite.

CVSS: 9.8 CRITICAL (v3.1, NVD)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-252
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Not given
NVD analysis: Modified
Record last updated: Jun 16, 2026
First seen by InfoSec Signals: Nov 1, 2026

Affected products

Affected products

openldap openldap openldap:openldap	2.4.22	NVD
vmware esxi vmware:esxi	4.0; 4.1	NVD
opensuse opensuse opensuse:opensuse	11.0	NVD
apple mac_os_x apple:mac_os_x	from 10.6.0 before 10.6.5	NVD
apple mac_os_x_server apple:mac_os_x_server	from 10.6.0 before 10.6.5	NVD

References

References

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705	third-party-advisory
http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html	mailing-list
http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html	mailing-list
http://secunia.com/advisories/40639	broken-link, vendor-advisory
http://secunia.com/advisories/40677	broken-link, vendor-advisory
http://secunia.com/advisories/40687	broken-link, vendor-advisory
http://secunia.com/advisories/42787	broken-link
http://security.gentoo.org/glsa/glsa-201406-36.xml	third-party-advisory
http://support.apple.com/kb/HT4435	issue-tracking
http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6570	exploit
1–10 of 19

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.