samba: AD users can induce a use-after-free in the server process with an LDAP add or modify request

A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl...

The vulnerability of the LDAP.v2 library in the Go programming language, which allows attackers to circumvent existing security restrictions

The vulnerability of the LDAP.v2 library in the Go programming language is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

CVE-2022-35842

An exposure of sensitive information to an unauthorized actor vulnerabiltiy CWE-200 in FortiOS SSL-VPN versions 7.2.0, versions 7.0.0 through 7.0.6 and versions 6.4.0 through 6.4.9 may allow a remote unauthenticated attacker to gain information about LDAP and SAML settings configured in FortiOS...

CVE-2022-24670

An attacker can use the unrestricted LDAP queries to determine configuration entries...

PT-2022-16789 · Forgerock · Access Management

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An attacker can use unrestricted LDAP queries to determine configuration entries. Recommendations: At the moment, there is no information about a newer...

PT-2022-6982 · D Link · D-Link Dap-1325

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1325 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. The specific flaw exists within the handling of XML data...

openldap bug fix and enhancement update

An update is available for openldap. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenLDAP is an open-source suite of Lightweight Directory Access Protocol LD...

CVE-2022-0143

When the LDAP connector is started with StartTLS configured, unauthenticated access is granted. This issue affects: all versions of the LDAP connector prior to 1.5.20.9. The LDAP connector is bundled with Identity Management IDM and Remote Connector Server RCS...

ForgeRock LDAP connector 安全漏洞

The ForgeRock LDAP connector is a connector from ForgeRock USA, Inc. It enables you to integrate synchronization services with LDAP v3 servers. A security vulnerability exists in ForgeRock LDAP connector versions prior to 1.5.20.9, which stems from a vulnerability that allows unauthenticated acce...

Remote code execution

Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

CVE-2022-30200 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

...

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

...

KB5017365: Windows 8.1 and Windows Server 2012 R2 Security Update (September 2022)

The remote Windows host is missing security update 5017365. It is, therefore, affected by multiple vulnerabilities - Windows Credential Roaming Service Elevation of Privilege Vulnerability CVE-2022-30170 - Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

KLA19245 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote cod...

CVE-2022-32745

A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault...

AZL-37015 CVE-2022-32746 affecting package samba for versions less than 4.18.3-1

A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl...

YugabyteDB 授权问题漏洞

YugabyteDB is a high-performance transactional distributed SQL database for cloud-native applications from Yugabyte USA. A security vulnerability exists in YugabyteDB version 2.6.1 that stems from a vulnerability that allows authentication to be bypassed using a null password when anonymous or...

LDAP Injection Authentication Bypass

Lightweight Directory Access Protocol LDAP is used by web applications to access and maintain directory information services. One of the most common uses for LDAP is to provide a Single-Sign-On SSO service that will allow clients to authenticate with a web site without any interaction assuming...

UBUNTU-CVE-2022-32745

A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault...

389-ds-base: sending crafted message could result in DoS

A vulnerability was found in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection. No bind or other authentication is required. This...