Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2008-0658

15
FAUCET Score

CVE-2008-0658 describes a denial-of-service vulnerability in OpenLDAP versions 2.3.39 and earlier, specifically within the BDB backend for slapd. An authenticated remote attacker can crash the daemon by performing a modrdn operation with a NOOP control. This vulnerability has a CVSS score of 4.0, indicating a low severity, as it requires authentication and only impacts availability. There is no known exploit code available, nor is there any evidence of active exploitation or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
2.3.39CPE matchmatch criteria
cpe:2.3:a:openldap:openldap:2.3.39:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

4.0MEDIUM

AV:N/AC:L/Au:S/C:N/I:N/A:P

Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Exploitability Score
8.0
Impact Score
2.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
3.05%
Probability of exploitation in next 30 days
EPSS Percentile
86.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0305 is in the 95th percentile among its peer group of 21,958 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: openldap-0:2.2.13-8.el4_6.4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: openldap-0:2.3.27-8.el5_1.3
View patch

Vendor Advisories (1)

redhatCVE-2008-0658Moderate

openldap: slapd crash on modrdn operation with NOOP control on entry in bdb storage

Feb 7, 2008

References

lists.apple.com / archives/security-announce/2009/Nov/msg00000.html
lists.opensuse.org / opensuse-security-announce/2008-04/msg00011.html
secunia.com / advisories/28914
Vendor Advisory
secunia.com / advisories/28926
Vendor Advisory
secunia.com / advisories/28953
Vendor Advisory
secunia.com / advisories/29068
Vendor Advisory
secunia.com / advisories/29225
secunia.com / advisories/29256
secunia.com / advisories/29461
secunia.com / advisories/29682
secunia.com / advisories/29957
security.gentoo.org / glsa/glsa-200803-28.xml
exchange.xforce.ibmcloud.com / vulnerabilities/40479
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9470
support.apple.com / kb/HT3937
wiki.rpath.com / Advisories:rPSA-2008-0059
wiki.rpath.com / wiki/Advisories:rPSA-2008-0059
debian.org / security/2008/dsa-1541
mandriva.com / security/advisories
openldap.org / devel/cvsweb.cgi/servers/slapd/back-bdb/modrdn.c.diff
Exploit
openldap.org / its/index.cgi/Software%20Bugs
redhat.com / support/errata/RHSA-2008-0110.html
securityfocus.com / archive/1/488242/100/200/threaded
securityfocus.com / bid/27778
securitytracker.com / id
ubuntu.com / usn/usn-584-1
vupen.com / english/advisories/2008/0536/references
vupen.com / english/advisories/2009/3184