CVE-2007-5707: Openldap

High severity, CVSS 7.1. EPSS: 3.7% chance of exploitation in the next 30 days.

OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service (slapd crash) via an LDAP request with a malformed objectClasses attribute. NOTE: this has been reported as a double free, but the reports are inconsistent.

Affected products

• Openldap Openldap: version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.1 only; version 1.1.0 only; …

Published 2007-10-30. Last modified 2026-06-16.