525 matches found
idm:DL1 security update
slapi-nis 0.56.6-2 - CVE 2021-3480: idm:DL1/slapi-nis: NULL dereference DoS with specially crafted Binding DN - Resolves: rhbz1944713...
CVE-2021-3480
A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability...
CVE-2021-3480
A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability...
CVE-2021-3480: NULL Pointer Dereference
A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability...
slapi-nis: NULL dereference (DoS) with specially crafted Binding DN
A flaw was found in slapi-nis. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability...
CVE-2021-3480
A flaw was found in slapi-nis. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability. Mitigation Red Hat has investigated whether a...
EulerOS 2.0 SP5 : openldap (EulerOS-SA-2021-1906)
According to the versions of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via ...
CVE-2020-27840
A flaw was found in samba. Spaces used in a string around a domain name DN, while supposed to be ignored, can cause invalid DN strings with spaces to instead write a zero-byte into out-of-bounds memory, resulting in a crash. The highest threat from this vulnerability is to system availability...
CVE-2020-27840
A flaw was found in samba. Spaces used in a string around a domain name DN, while supposed to be ignored, can cause invalid DN strings with spaces to instead write a zero-byte into out-of-bounds memory, resulting in a crash. The highest threat from this vulnerability is to system availability...
CVE-2020-27840
A flaw was found in samba. Spaces used in a string around a domain name DN, while supposed to be ignored, can cause invalid DN strings with spaces to instead write a zero-byte into out-of-bounds memory, resulting in a crash. The highest threat from this vulnerability is to system availability...
dbl (>=0.0.7, <=0.1.12), dbl2 (>=0.5.4, <=0.5.6) +7 more potentially affected by CVE-2020-7697 via mock2easy (>=0.0.3, <=0.0.24)
mock2easy NPM version =0.0.3, =0.0.7, =0.5.4, =1.0.3, =0.4.0, =1.2.0, =0.0.1, =1.0.2, =0.0.1, =0.0.2 Source cves: CVE-2020-7697 Source advisory: GHSA-G4XJ-WCQ6-QWX5...
EulerOS 2.0 SP3 : openldap (EulerOS-SA-2021-1824)
According to the versions of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was discovered in ldapX509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in adkeystring, resulting in...
Denial Of Service (DoS)
openldap is vulnerable to denial of service. An assertion failure in slapd in the X.509 DN parsing in decode.c bernextelement results in a denial of service condition...
Denial Of Service (DoS)
openldap is vulnerable to denial of service. The vulnerability exists due to a flaw was discovered in ldapX509dn2bv in OpenLDAP leading to a slapd crash in the X.509 DN parsing in adkeystring...
SUSE: Security Advisory (SUSE-SU-2015:1518-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 2.9.1 : openldap (EulerOS-SA-2021-1719)
According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateChec...
PT-2021-7712
Name of the Vulnerable Software and Affected Versions 389-ds-base versions prior to 0.56.7 Description A flaw was found in slapi-nis that could allow an unauthenticated attacker to crash the 389-ds-base directory server due to a NULL pointer dereference during the parsing of the Binding DN. The...
USN-4888-1 ldb vulnerabilities
Douglas Bagnall discovered that ldb, when used with Samba, incorrectly handled certain LDAP attributes. A remote attacker could possibly use this issue to cause the LDAP server to crash, resulting in a denial of service. CVE-2021-20277 Douglas Bagnall discovered that ldb, when used with Samba,...
Heap corruption via crafted DN strings
Description A DN may be represented in string form with arbitrary amounts of space around the component values. These spaces are supposed to be ignored, but invalid DNs strings with spaces may instead cause a zero byte to be written into out-of-bounds memory. An LDAP bind request can send a strin...
SUSE SLED15 / SLES15 Security Update : openldap2 (SUSE-SU-2021:0723-1)
This update for openldap2 fixes the following issues : bsc1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c bernextelement, resulting in denial of service. bsc1182411 CVE-2020-36229 - ldapX509dn2bv crash in the X.509 DN parsing in adkeystring, resulting in...