CVE-2012-1164

slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned.

• CWE-119

• http://rhn.redhat.com/errata/RHSA-2012-0899.html
• http://seclists.org/fulldisclosure/2019/Dec/26
• http://secunia.com/advisories/48372Vendor Advisory
• http://secunia.com/advisories/49607Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201406-36.xml
• http://www.mandriva.com/security/advisories?name=MDVSA-2012:130
• http://www.openldap.org/its/index.cgi/Software%20Bugs?id=7143Vendor Advisory
• http://www.openldap.org/software/release/changes.html
• http://www.securityfocus.com/bid/52404
• https://seclists.org/bugtraq/2019/Dec/23
• https://support.apple.com/kb/HT210788
• http://rhn.redhat.com/errata/RHSA-2012-0899.html
• http://seclists.org/fulldisclosure/2019/Dec/26
• http://secunia.com/advisories/48372Vendor Advisory
• http://secunia.com/advisories/49607Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201406-36.xml
• http://www.mandriva.com/security/advisories?name=MDVSA-2012:130
• http://www.openldap.org/its/index.cgi/Software%20Bugs?id=7143Vendor Advisory
• http://www.openldap.org/software/release/changes.html
• http://www.securityfocus.com/bid/52404
• https://seclists.org/bugtraq/2019/Dec/23
• https://support.apple.com/kb/HT210788

Published

Jun 29, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-1158Moodle before 2.2.2 has a course information leak in gradebo…4.3
• CVE-2012-1159Moodle before 2.2.2: Overview report allows users to see hid…4.3
• CVE-2012-1160Moodle before 2.2.2 has a permission issue in Forum Subscrip…2.7
• CVE-2012-1161Moodle before 2.2.2: Course information leak via hidden cour…4.3
• CVE-2012-1162Heap-based buffer overflow in the _zip_readcdir function in …
• CVE-2012-1163Integer overflow in the _zip_readcdir function in zip_open.c…
• CVE-2012-1165The mime_param_cmp function in crypto/asn1/asn_mime.c in Ope…
• CVE-2012-1166The default keybindings for wwm in LTSP Display Manager (ldm…
• CVE-2012-1167The JBoss Server in JBoss Enterprise Application Platform 5.…
• CVE-2012-1168Moodle before 2.2.2 has a password and web services issue wh…8.2
• CVE-2012-1169Moodle before 2.2.2 has Personal information disclosure, whe…5.3
• CVE-2012-1170Moodle before 2.2.2 has an external enrolment plugin context…7.5