Lucene search
Gentoo FoundationMGASA-2015-0143HistoryApr 10, 2015 - 1:54 a.m.
Updated openldap packages fix CVE-2015-1545
2015-04-1001:54:46
Gentoo Foundation
advisories.mageia.org
8
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.961 High
EPSS
Percentile
99.5%
Updated openldap packages fix security vulnerability: The deref overlay in slapd 2.4.13 through 2.4.40 dereferences a NULL pointer when a search request includes the Deref control with an empty list of attributes to return (missing input validation). This allows a remote unauthenticated client to crash the LDAP server (CVE-2015-1545).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 4 | noarch | openldap | < 2.4.38-1.3 | openldap-2.4.38-1.3.mga4 |
Related
nessus
nessus
Mandriva Linux Security Advisory : openldap (MDVSA-2015:074)
2015-03-30 00:00:00
Fedora 21 : openldap-2.4.40-3.fc21 (2015-2055)
2015-04-14 00:00:00
openSUSE Security Update : openldap2 (openSUSE-2015-526)
2015-08-03 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: openldap-2.4.40-3.fc21
2015-04-13 07:04:55
ubuntucve
ubuntucve
CVE-2015-1545
2015-02-12 00:00:00
checkpoint_advisories
checkpoint_advisories
OpenLDAP slapd Deref Overlay Null Pointer Dereference (CVE-2015-1545)
2015-07-12 00:00:00
cve
cve
CVE-2015-1545
2015-02-12 16:59:00
prion
prion
Null pointer dereference
2015-02-12 16:59:00
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0143)
2022-01-28 00:00:00
Fedora Update for openldap FEDORA-2015-2055
2015-04-14 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:1077-1)
2021-04-19 00:00:00
cvelist
cvelist
CVE-2015-1545
2015-02-12 16:00:00
debiancve
debiancve
CVE-2015-1545
2015-02-12 16:59:00
f5
f5
K16343 : OpenLDAP vulnerabilities CVE-2015-1545 and CVE-2015-1546
2015-04-02 00:00:00
SOL16343 - OpenLDAP vulnerabilities CVE-2015-1545 and CVE-2015-1546
2015-04-02 00:00:00
kaspersky
kaspersky
KLA10486 Denial of service vulnerability in OpenLDAP
2015-02-12 00:00:00
debian
debian
[SECURITY] [DSA 3209-1] openldap security update
2015-03-30 21:05:49
[SECURITY] [DLA 203-1] openldap security update
2015-04-18 15:26:48
ubuntu
ubuntu
OpenLDAP vulnerabilities
2015-05-26 00:00:00
securityvulns
securityvulns
OpenLDAP multiple security vulnerabilities
2015-04-13 00:00:00
[SECURITY] [DSA 3209-1] openldap security update
2015-04-13 00:00:00
APPLE-SA-2015-04-08-2 OS X 10.10.3 and Security Update 2015-004
2015-04-09 00:00:00
osv
osv
openldap - security update
2015-03-30 00:00:00
openldap - security update
2015-04-18 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.961 High
EPSS
Percentile
99.5%
Related for MGASA-2015-0143