CVE-2007-6698: Openldap

Medium severity, CVSS 4.0. EPSS: 2% chance of exploitation in the next 30 days.

The BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a denial of service (crash) via a potentially-successful modify operation with the NOOP control set to critical, possibly due to a double free vulnerability.

Affected products

• Openldap Openldap: up to and including 2.3.35

Published 2008-02-01. Last modified 2026-06-16.