cyrus-sasl: denial of service in _sasl_add_string function

cyrus-sasl aka Cyrus SASL 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in sasladdstring in common.c in cyrus-sasl...

Huawei EulerOS: Security Advisory for compat-openldap (EulerOS-SA-2020-2334)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openldap bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

EulerOS 2.0 SP2 : compat-openldap (EulerOS-SA-2020-2334)

According to the version of the compat-openldap package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service daemon...

Debian: Security Advisory (DSA-4782-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-2425-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Vulnerability fixed in OpenLDAP

OpenLDAP developers have released an update to fix a vulnerability. The vulnerability allows an unauthenticated remote malicious party to cause a denial-of-service attack. No CVD ID disclosed. OpenLDAP has released updates to fix the vulnerability in v 2.4.55. For more information, see:...

PT-2020-6567 · Openldap +8 · Openldap +8

Name of the Vulnerable Software and Affected Versions: OpenLDAP affected versions not specified Description: A flaw was found in OpenLDAP, allowing an attacker to trigger an assertion failure by sending a malicious packet to be processed by OpenLDAP's slapd server. This flaw poses the highest...

PT-2020-6566 · Openldap +7 · Openldap +7

Name of the Vulnerable Software and Affected Versions: OpenLDAP versions prior to 2.4.56 Description: A flaw in OpenLDAP allows an attacker to force a failed assertion in the csnNormalize23 function by sending a malicious packet. This can lead to a denial of service, affecting system availability...

Debian DLA-2425-1 : openldap security update

A vulnerability in the handling of normalization with modrdn was discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. An unauthenticated remote attacker can use this flaw to cause a denial of service slapd daemon crash via a specially crafted packet. For...

Debian DSA-4782-1 : openldap - security update

A vulnerability in the handling of normalization with modrdn was discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. An unauthenticated remote attacker can use this flaw to cause a denial of service slapd daemon crash via a specially crafted packet. C Tenab...

[SECURITY] [DLA 2425-1] openldap security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2425-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta November 01, 2020 https://wiki.debian.org/LTS -...

DLA-2425-1 openldap - security update

Bulletin has no description...

[SECURITY] [DSA 4782-1] openldap security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4782-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 30, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4782-1] openldap security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4782-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 30, 2020 https://www.debian.org/security/faq -...

CVE-2020-25692

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service...

EulerOS 2.0 SP5 : cyrus-sasl (EulerOS-SA-2020-2281)

According to the version of the cyrus-sasl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - cyrus-sasl aka Cyrus SASL 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDA...

UBUNTU-CVE-2020-25692

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service...

DSA-4782-1 openldap - security update

Bulletin has no description...

Huawei EulerOS: Security Advisory for cyrus-sasl (EulerOS-SA-2020-2281)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...