SUSE-SU-2019:1166-1 Security update for audit

This update for audit fixes the following issues: Audit on SUSE Linux Enterprise 12 SP3 was updated to 2.8.1 to bring new features and bugfixes. bsc1125535 FATE326346 Many features were added to auparsenormalize cli option added to auditd and audispd for setting config dir In auditd, restore the...

PT-2020-14606 · Openldap +3 · Openldap +3

Name of the Vulnerable Software and Affected Versions: OpenLDAP versions prior to 2.4.46-10.el8 Description: The issue is related to a certificate-validation flaw in libldap when asserting RFC6125 support. Specifically, it considers the Common Name CN even when there is a non-matching...

Mac OS X 10.10.x < 10.10.3 Multiple Vulnerabilities

Binary data 700510.prm...

openSUSE Security Update : curl (openSUSE-2019-435)

This update for curl to version 7.60.0 fixes the following issues : These security issues were fixed : - CVE-2018-1000300: Prevent heap-based buffer overflow when closing down an FTP connection with very long server command replies bsc1092094. - CVE-2018-1000301: Prevent buffer over-read that cou...

SUSE SLED12 / SLES12 Security Update : audit (SUSE-SU-2019:0563-1)

This update for audit fixes the following issues : Audit on SUSE Linux Enterprise 12 SP4 was updated to 2.8.1 to bring new features and bugfixes. bsc1125535 FATE326346 Many features were added to auparsenormalize cli option added to auditd and audispd for setting config dir In auditd, restore the...

SUSE-SU-2019:0563-1 Security update for audit

This update for audit fixes the following issues: Audit on SUSE Linux Enterprise 12 SP4 was updated to 2.8.1 to bring new features and bugfixes. bsc1125535 FATE326346 Many features were added to auparsenormalize cli option added to auditd and audispd for setting config dir In auditd, restore the...

Photon OS 1.0: Openldap PHSA-2017-0024

An update of the openldap package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0024. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121713;...

Denial Of Service (DoS)

openldap is vulnerable to denial of service DoS attacks. The vulnerability exists as the bergetnext function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service reachable assertion and application crash via crafted BER data, as demonstrate...

Denial Of Service (DoS)

openldap is vulnerable to denial of service DoS attacks. The vulnerability exists as an off-by-one error leading to a crash was discovered in openldap's processing of DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS response...

Denial Of Service (DoS)

openldap is vulnerable to denial of service DoS attacks. The vulnerability exists as the rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service slapd crash by unbinding immediately after a search request,...

Weak Cipher Suite

openldap is uses weak cipher suite by default. The default cipher suite is always used in libraries/libldap/tlsm.c in OpenLDAP, when using the Mozilla NSS backend, even when TLSCipherSuite is set, which might cause OpenLDAP to use weaker ciphers than intended and make it easier for remote attacke...

Denial Of Service (Dos)

openldap is vulnerable to denial of service. An assertion failure and daemon exit occurs in slapd when an LDAP search query with attrsOnly set to true returns empty attributes. This allows a remote attacker to exploit the vulnerability to crash the process...

Photon OS 1.0: Libxml2 / Ncurses / Openldap / Ruby PHSA-2017-0024 (deprecated)

An update of ncurses,openldap,libxml2,ruby packages for PhotonOS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0024. The text itself is copyright C...

Security Bulletin: IBM Security Access Manager appliances are affected by a vulnerability in OpenLDAP (CVE-2015-6908)

Summary IBM Security Access Manager appliances use OpenLDAP. A vulnerability has been identified in OpenLDAP that affects the IBM Security Access Manager appliances. IBM Security Access Manager has addressed this vulnerability. Vulnerability Details CVEID: CVE-2015-6908 DESCRIPTION: OpenLDAP is...

Security Bulletin: A vulnerability in OpenLDAP affects PowerKVM

Summary PowerKVM is affected by a vulnerability in OpenLDAP. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-9287 DESCRIPTION: OpenLDAP is vulnerable to a denial of service, caused by a double free memory error in servers/slapd/back-mdb/search.c. By issuing a searc...

Security Bulletin: A vulnerability in openLDAP affects IBM Flex System Manager(FSM) (CVE-2015-6908)

Summary A security vulnerability has been discovered in openLDAP that is embedded in the IBM FSM. This bulletin addresses the vulnerability. Vulnerability Details CVEID: CVE-2015-6908 DESCRIPTION: OpenLDAP is vulnerable to a denial of service, caused by an assertion error in the bergetnext...

Security Bulletin: Vulnerabilities in OpenLDAP affect PowerKVM (CVE-2015-3276, CVE-2015-6908)

Summary PowerKVM is affected by two vulnerabilities in OpenLDAP. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-3276 DESCRIPTION: OpenLDAP could allow a remote attacker to bypass security restrictions, caused by the failure to properly parse OpenSSL-style cipher string...

Security Bulletin: A vulnerability in OpenLDAP affects IBM Tivoli Composite Application Manager for Transactions (CVE-2015-6908)

Summary A vulnerability in OpenLDAP 2.4.42 was disclosed on September 10, 2015 by openldap.org as a fix in OpenLDAP 2.4.43 ITS8240. OpenLDAP 2.4.44, used by IBM Tivoli Composite Application Manager for Transactions, has addressed the vulnerability. Vulnerability Details CVE-ID: CVE-2015-6908...

Security Bulletin: IBM Security Access Manager Appliance is affected by an OpenLDAP vulnerability (CVE-2017-9287)

Summary IBM Security Access Manager Appliance has addressed the following vulnerability in OpenLDAP. Vulnerability Details CVEID: CVE-2017-9287 DESCRIPTION: OpenLDAP is vulnerable to a denial of service, caused by a double free memory error in servers/slapd/back-mdb/search.c. By issuing a search...

Security Bulletin: IBM Security Access Manager appliances are affected by a vulnerability in OpenLDAP (CVE-2015-6908)

Summary A vulnerability in OpenLDAP affects IBM Security Access Manager appliances. Vulnerability Details CVEID: CVE-2015-6908 DESCRIPTION: OpenLDAP is vulnerable to a denial of service, caused by an assertion error in the bergetnext function. By sending a specially-crafted packet, a remote...