CVE-2014-8182
Publication date 2 January 2020
Last updated 25 August 2025
Ubuntu priority
Description
An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS responses.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| openldap | 16.04 LTS xenial |
Not affected
|
| 14.04 LTS trusty |
Not affected
|
|
Notes
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score |
7.5 · High
|
| Attack vector | Network |
| Attack complexity | Low |
| Privileges required | None |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | None |
| Integrity impact | None |
| Availability impact | High |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |