CVE-2006-5779: Canonical Ubuntu Linux

High severity, CVSS 7.5. EPSS: 76.9% chance of exploitation in the next 30 days.

OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via LDAP BIND requests with long authcid names, which triggers an assertion failure.

Affected products

• Canonical Ubuntu Linux: version 5.10 only; version 6.06 only; version 6.10 only
• Openldap Openldap: before 2.3.29 (fixed in 2.3.29)

Published 2006-11-07. Last modified 2026-06-16.