CVE-2015-6908 describes a denial-of-service vulnerability in the ber_get_next function of OpenLDAP versions 2.4.42 and earlier, affecting products like Apple Mac OS X and OpenLDAP itself. This vulnerability, with a CVSS score of 5.0, can be triggered remotely with low attack complexity and no authentication, leading to an application crash. While not actively exploited in the wild and lacking significant community discussion or media coverage, a proof-of-concept exploit is publicly available on ExploitDB.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2.4.42CPE matchmatch criteria | cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:* | ||
<= 10.11.1CPE matchmatch criteria | cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.