CVE-2015-6908 in Apple Mac OS X

Summary

The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

09/11/2015

Disclosure

09/11/2015

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
79581	Apple Mac OS X OpenLDAP input validation	20	Proof-of-Concept	Official fix	CVE-2015-6908
77678	OpenLDAP io.c ber_get_next input validation	20	Proof-of-Concept	Official fix	CVE-2015-6908

Sources

• MITRE
• NVD
• CVE Details