CVE-2010-0211Openldap Vulnerability
The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN…
Published Jul 28, 2010 · Updated Aug 4, 2026 · Also known as DEBIAN-CVE-2010-0211, DSA-2077-1
Key Facts
Patch immediately- CVE-2010-0211 is a critical-severity vulnerability (CVSS 9.8 v3.1) affecting Openldap, Mac OS X (Apple), Mac OS X Server (Apple) and 9 more products.
- It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
- EPSS estimates a 28% probability of exploitation in the next 30 days.
- Fixed versions are available, including Mac OS X 10.6.5, Mac OS X Server 10.6.5, compat-openldap 2.3.43_2.2.29-12.el5_5.1.
- Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.
Scores
CVSS v3.1
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS (30-day exploit likelihood)
28%
Higher than 98.1% of all scored CVEs
Exploit maturity
Proof of concept
ATLAS score
44/100
Publication score, see How it works
Exploitation Verdict
KEV listed
Not listed
Federal due date
None
No federal due date
Ransomware use
Not reported
Attributed actors
None named
Exploit & Defence Guidance
Exploit maturity
Proof of concept
Public exploit code
1
Proof-of-concept links
In-the-wild evidence
1
Reports of active use
Advisories And Exploit References
- advisoryhttps://security-tracker.debian.org/tracker/CVE-2010-0211
- advisoryhttp://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
- advisoryRHSA-2010:0542
- advisoryRHSA-2010:0543
- advisory40639
- advisory40677
Description
The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN string containing invalid UTF-8 sequences, which triggers a free of an invalid, uninitialized pointer in the slap_mods_free function, as demonstrated using the Codenomicon LDAPv3 test suite.
Affected Products
28 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| OpenldapOpenldap | 2.4.22 | 2.4.23-1 |
| Mac OS XApple | See advisory | 10.6.5 |
| Mac OS X ServerApple | See advisory | 10.6.5 |
| OpensuseOpensuse | 11.0 | n/a |
| EsxiVmware | 4.0, 4.1 | n/a |
Patched Releases
Mac OS X
10.6.5
Mac OS X Server
10.6.5
compat-openldap
2.3.43_2.2.29-12.el5_5.1
Openldap
0:2.2.13-12.el4_8.3, 0:2.3.43-12.el5_5.1, 2.3.43-12.el5_5.1, 2.4.11-1+lenny2, 2.4.23-1
openldap-clients
2.3.43-12.el5_5.1
openldap-devel
2.3.43-12.el5_5.1
openldap-servers
2.3.43-12.el5_5.1
openldap-servers-overlays
2.3.43-12.el5_5.1
openldap-servers-sql
2.3.43-12.el5_5.1
rootio-openldap
2.4.23-1
Timeline
Publicly disclosed
Jul 28, 2010
Last updated
Aug 4, 2026
Weakness Type
- CWE-252 Unchecked Return Value
References
- advisorysecurity-tracker.debian.org · CVE-2010-0211
- advisorykb.juniper.net · InfoCenter
- advisoryRHSA-2010:0542
- advisoryRHSA-2010:0543
- advisory40639
FAQ
Common Questions.
The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN string containing invalid UTF-8 sequenc…
Affected: Openldap versions 2.4.22; Mac OS X (Apple); Mac OS X Server (Apple), among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including Mac OS X 10.6.5, Mac OS X Server 10.6.5, compat-openldap 2.3.43_2.2.29-12.el5_5.1.
Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.
Is CVE-2010-0211 On Your Attack Surface?
Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.
Request A Demo