CVE-2016-4984: Openldap Openldap-Servers

Medium severity, CVSS 4.7. EPSS: 0.2% chance of exploitation in the next 30 days.

/usr/libexec/openldap/generate-server-cert.sh in openldap-servers sets weak permissions for the TLS certificate, which allows local users to obtain the TLS certificate by leveraging a race condition between the creation of the certificate, and the chmod to protect it.

Affected products

• Openldap Openldap-Servers: any version

Published 2017-07-17. Last modified 2026-06-17.