On Fri, Feb 06, 2015 at 02:09:47PM -0800, Xin Li wrote: > Is there a CVE number for this one? There's been a request: http://www.openwall.com/lists/oss-security/2015/02/06/3 but I haven't seen one assigned. I forgot to mention there's also a remote DoS in the deref overlay in slapd 2.4.13 through 2.4.40, as I don't use that.