OpenLDAP Denial of Service Vulnerability (CNVD-2021-07937)

OpenLDAP is a free, open source implementation of the Lightweight Directory Access Protocol LDAP. A denial of service vulnerability exists in ldapX509dn2bv in OpenLDAP versions prior to 2.4.57. An attacker can exploit this vulnerability to cause a slapd crash in the X.509 DN resolution of...

OpenLDAP 安全漏洞

OpenLDAP is a free, open source implementation of the Lightweight Directory Access Protocol LDAP. A slapd security vulnerability exists in the X.509 DN parsing of decode.c bernextelement in OpenLDAP versions prior to 2.4.57. An attacker could exploit this vulnerability to cause a denial of servic...

OpenLDAP Integer Overflow Vulnerability

OpenLDAP is a free, open source implementation of the Lightweight Directory Access Protocol LDAP. An integer underflow vulnerability exists in OpenLDAP versions prior to 2.4.57. An attacker could exploit this vulnerability to cause a slapd crash in Certificate List Exact Assertion processing...

OpenLDAP has an unspecified vulnerability

OpenLDAP is a free, open source implementation of the Lightweight Directory Access Protocol LDAP. A slapd security vulnerability exists in the X.509 DN parsing of decode.c bernextelement in OpenLDAP versions prior to 2.4.57. An attacker could exploit this vulnerability to cause a denial of servic...

OpenLDAP Double Release and Out-of-Bounds Read Vulnerability

OpenLDAP is a free, open source implementation of the Lightweight Directory Access Protocol LDAP. A double release and out-of-bounds read vulnerability exists in OpenLDAP versions prior to 2.4.57. An attacker could exploit this vulnerability to cause a slapd crash in the Values Return Filter...

OpenLDAP Double Release Vulnerability (CNVD-2021-07318)

OpenLDAP is a free, open source implementation of the Lightweight Directory Access Protocol LDAP. A double release vulnerability exists in OpenLDAP versions prior to 2.4.57. An attacker could exploit this vulnerability to cause a slapd crash in saslAuthzTo processing...

OpenLDAP integer underflow vulnerability (CNVD-2021-06636)

OpenLDAP is a free, open source implementation of the Lightweight Directory Access Protocol LDAP. An integer underflow vulnerability exists in OpenLDAP versions prior to 2.4.57. An attacker could exploit this vulnerability to cause a slapd crash in Certificate Exact Assertion processing...

OpenLDAP Denial of Service Vulnerability (CNVD-2021-07934)

OpenLDAP is a free, open source implementation of the Lightweight Directory Access Protocol LDAP. A denial of service vulnerability exists in OpenLDAP versions prior to 2.4.57. An attacker could exploit this vulnerability to cause a memch-bvlen calculation error and a slapd crash in saslAuthzTo...

OpenLDAP Invalid Pointer Release Vulnerability

OpenLDAP is a free, open source implementation of the Lightweight Directory Access Protocol LDAP. An invalid pointer release vulnerability exists in OpenLDAP versions prior to 2.4.57. An attacker could exploit this vulnerability to cause a slapd crash in saslAuthzTo processing...

SUSE-SU-2020:3939-1 Security update for cyrus-sasl

This update for cyrus-sasl fixes the following issues: - CVE-2019-19906: Fixed an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet bsc1159635...

SUSE-SU-2020:14579-1 Security update for cyrus-sasl

This update for cyrus-sasl fixes the following issues: - CVE-2019-19906: Fixed an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet bsc1159635...

Denial Of Service (DoS)

openldap is vulnerable to denial of service. An assertion failure in CSN normalization allows an attacker to crash the application with malicious input...

MGASA-2020-0407 Updated openldap packages fix a security vulnerability

A vulnerability in the handling of normalization with modrdn was discovered in OpenLDAP. An unauthenticated remote attacker can use this flaw to cause a denial of service slapd daemon crash via a specially crafted packet CVE-2020-25692. Also, the PID file path in the systemd service was fixed to...

UBUNTU-CVE-2020-25692

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service...

Amazon Linux 2 : openldap (ALAS-2020-1539)

The version of openldap installed on the remote host is prior to 2.4.44-22. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1539 advisory. In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of...

USN-4352-2 openldap vulnerability

USN-4352-1 fixed a vulnerability in OpenLDAP. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that OpenLDAP incorrectly handled certain queries. A remote attacker could possibly use this issue to cause OpenLDAP ...

USN-4352-1 openldap vulnerability

It was discovered that OpenLDAP incorrectly handled certain queries. A remote attacker could possibly use this issue to cause OpenLDAP to consume resources, resulting in a denial of service...

USN-4078-1 openldap vulnerabilities

It was discovered that OpenLDAP incorrectly handled rootDN delegation. A database administrator could use this issue to request authorization as an identity from another database, contrary to expectations. CVE-2019-13057 It was discovered that OpenLDAP incorrectly handled SASL authentication and...

Denial Of Service (DoS)

openldap is vulnerable to denial of service DoS attacks. The vulnerability exists as the bergetnext function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service reachable assertion and application crash via crafted BER data, as demonstrate...

Security Bulletin: IBM Security Access Manager Appliance is affected by an OpenLDAP vulnerability (CVE-2017-9287)

Summary IBM Security Access Manager Appliance has addressed the following vulnerability in OpenLDAP. Vulnerability Details CVEID: CVE-2017-9287 DESCRIPTION: OpenLDAP is vulnerable to a denial of service, caused by a double free memory error in servers/slapd/back-mdb/search.c. By issuing a search...