CVE-2015-1545: Null Pointer Dereference
OpenLDAP. Multiple issues were addressed by updating to OpenLDAP version 2.4.28.
Other sources
The derefparseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an empty attribute list in a deref control in a search request.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2019-8837
- CVE-2019-8853
- CVE-2019-8856
- CVE-2019-8848
- CVE-2019-8834
- CVE-2019-8842
- CVE-2019-8839
- CVE-2019-8830
- CVE-2019-8851
- CVE-2019-8833
- CVE-2019-8828
- CVE-2019-8838
- CVE-2019-8847
- CVE-2019-8852
- CVE-2019-15903
- CVE-2020-9782
- CVE-2012-1164
- CVE-2012-2668
- CVE-2013-4449
- CVE-2015-1545
- CVE-2019-13057
- CVE-2019-13565
- CVE-2019-8832
- CVE-2017-16808
- CVE-2018-10103
- CVE-2018-10105
- CVE-2018-14461
- CVE-2018-14462
- CVE-2018-14463
- CVE-2018-14464
- CVE-2018-14465
- CVE-2018-14466
- CVE-2018-14467
- CVE-2018-14468
- CVE-2018-14469
- CVE-2018-14470
- CVE-2018-14879
- CVE-2018-14880
- CVE-2018-14881
- CVE-2018-14882
- CVE-2018-16227
- CVE-2018-16228
- CVE-2018-16229
- CVE-2018-16230
- CVE-2018-16300
- CVE-2018-16301
- CVE-2018-16451
- CVE-2018-16452
- CVE-2019-15166
- CVE-2019-15167
- CVE-2019-15126
Frequently Asked Questions
What is CVE-2015-1545?
CVE-2015-1545 is a vulnerability in OpenLDAP that was addressed in version 2.4.28.
Which software versions are affected by CVE-2015-1545?
CVE-2015-1545 affects macOS Catalina up to version 10.15.2, Mojave, and High Sierra.
How can I fix CVE-2015-1545?
To fix CVE-2015-1545, update your OpenLDAP software to version 2.4.28 or later.
What is the severity of CVE-2015-1545?
The severity of CVE-2015-1545 is not specified in the provided information.
Where can I find more information about CVE-2015-1545?
You can find more information about CVE-2015-1545 at the following reference: https://support.apple.com/en-us/HT210788