Lucene search

Moderate: Red Hat Security Advisory: openldap security update

🗓️ 22 Feb 2022 17:55:11Reported by RedHatType

OpenLDAP security update with certificate list syntax validation and CSN normalization assertion failure

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 121
Tenable Nessus	Debian DLA-2481-1 : openldap security update	7 Dec 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : openldap (EulerOS-SA-2021-2277)	9 Aug 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : openldap (EulerOS-SA-2021-2602)	25 Oct 202100:00	–	nessus
Tenable Nessus	NewStart CGSL CORE 5.05 / MAIN 5.05 : openldap Multiple Vulnerabilities (NS-SA-2023-0016)	11 Apr 202300:00	–	nessus
Tenable Nessus	SUSE SLES12 Security Update : openldap2 (SUSE-SU-2021:0142-1)	20 Jan 202100:00	–	nessus
Tenable Nessus	openSUSE Security Update : openldap2 (openSUSE-2021-107)	25 Jan 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : openldap (EulerOS-SA-2021-2251)	9 Aug 202100:00	–	nessus
Tenable Nessus	Oracle Linux 7 : openldap (ELSA-2022-0621)	23 Feb 202200:00	–	nessus
Tenable Nessus	NewStart CGSL CORE 5.04 / MAIN 5.04 : openldap Multiple Vulnerabilities (NS-SA-2022-0077)	15 Nov 202200:00	–	nessus
Tenable Nessus	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : OpenLDAP vulnerabilities (USN-4634-1)	17 Nov 202000:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
RedHat	7	i686	openldap	2.4.44-25.el7_9	openldap-2.4.44-25.el7_9.i686.rpm
RedHat	7	ppc	openldap	2.4.44-25.el7_9	openldap-2.4.44-25.el7_9.ppc.rpm
RedHat	7	ppc64	openldap	2.4.44-25.el7_9	openldap-2.4.44-25.el7_9.ppc64.rpm
RedHat	7	ppc64le	openldap	2.4.44-25.el7_9	openldap-2.4.44-25.el7_9.ppc64le.rpm
RedHat	7	s390	openldap	2.4.44-25.el7_9	openldap-2.4.44-25.el7_9.s390.rpm
RedHat	7	s390x	openldap	2.4.44-25.el7_9	openldap-2.4.44-25.el7_9.s390x.rpm
RedHat	7	x86_64	openldap	2.4.44-25.el7_9	openldap-2.4.44-25.el7_9.x86_64.rpm
RedHat	7	ppc64	openldap-clients	2.4.44-25.el7_9	openldap-clients-2.4.44-25.el7_9.ppc64.rpm
RedHat	7	ppc64le	openldap-clients	2.4.44-25.el7_9	openldap-clients-2.4.44-25.el7_9.ppc64le.rpm
RedHat	7	s390x	openldap-clients	2.4.44-25.el7_9	openldap-clients-2.4.44-25.el7_9.s390x.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2020-25709
access	www.access.redhat.com/security/cve/CVE-2020-25710
access	www.access.redhat.com/security/updates/classification/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
git	www.git.openldap.org/openldap/openldap/-/commit/ab3915154e69920d480205b4bf5ccb2b391a0a1f
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-25709
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-25710
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 Feb 2022 17:11Current

7.8High risk

Vulners AI Score7.8

CVSS25

CVSS37.5

EPSS0.13254

CWE-617