suse · CVE-2017-17740

Quick triage

Priority: medium Published: 2021-05-30 14:04:55 UTC Updated: 2026-04-17 15:48:56 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2017-17740 severity moderate: SUSE including 495 source package names (0.1.0:libldap-2_4-2-2.4.46-9.19.2, 0.1.0:libldap-data-2.4.46-9.19.2, …), 680 product×package rows across 160 product lines (Container bci/dotnet-aspnet, Container bci/dotnet-runtime, … (160 product lines)): Fixed 510, Known Affected 157, Known Not Affected 13.

Description:

contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation.

cvelogic Threat Intelligence