https://bugs.openldap.org/show_bug.cgi?id=9383
Howard Chu hyc@openldap.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Group|OpenLDAP-devs |
--- Comment #2 from Howard Chu hyc@openldap.org --- (In reply to phasip from comment #0)
A malicious packet can force OpenLDAP to fail an assertion and crash. slapd: schema_init.c:419: int certificateListValidate(Syntax *, struct berval *): Assertion `tag == LBER_INTEGER' failed.
Note that this code was behind #ifdef LDAP_DEVEL so it is not vulnerable in any public OpenLDAP releases.