openSUSE Security Update : openldap2 (openSUSE-2016-92) (Logjam)

This update fixes the following security issues : - CVE-2015-6908: The bergetnext function allowed remote attackers to cause a denial of service reachable assertion and application crash via crafted BER data, as demonstrated by an attack against slapd. bsc945582 - CVE-2015-4000: Fix weak...

SUSE SLED12 / SLES12 Security Update : openldap2 (SUSE-SU-2016:0224-1) (Logjam)

This update fixes the following security issues : - CVE-2015-6908: The bergetnext function allowed remote attackers to cause a denial of service reachable assertion and application crash via crafted BER data, as demonstrated by an attack against slapd. bsc945582 - CVE-2015-4000: Fix weak...

openSUSE: Security Advisory for openldap2 (openSUSE-SU-2016:0226-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory for openldap2 (SUSE-SU-2016:0224-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for openldap2 (important)

This update fixes the following security issues: - CVE-2015-6908: The bergetnext function allowed remote attackers to cause a denial of service reachable assertion and application crash via crafted BER data, as demonstrated by an attack against slapd. bsc945582 - CVE-2015-4000: Fix weak...

SUSE SLED11 / SLES11 Security Update : openldap2 (SUSE-SU-2016:0090-1)

This update fixes the following security issue : - CVE-2015-6908. Passing a crafted packet to the function bergetnext, an attacker may cause a remote denial of service, crashing the OpenLDAP server bsc945582. Note that Tenable Network Security has extracted the preceding description block directl...

SUSE-SU-2016:0090-1 Security update for openldap2

This update fixes the following security issue: - CVE-2015-6908. Passing a crafted packet to the function bergetnext, an attacker may cause a remote denial of service, crashing the OpenLDAP server bsc945582...

SUSE SLED11 / SLES11 Security Update : Recommended update for openldap2 (SUSE-SU-2015:1482-1) (Logjam)

openldap2 was updated to fix one security issue. This security issue was fixed : - CVE-2015-4000: The Logjam Attack / weakdh.org bsc937766. The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracted the preceding description blo...

openSUSE Security Update : openldap2 (openSUSE-2015-526)

OpenLDAP was updated to fix two security issues and one bug. The following vulnerabilities were fixed : - CVE-2015-1546: slapd crash in valueReturnFilter cleanup bnc916914 - CVE-2015-1545: slapd crashes on search with deref control and empty attr list bnc916897 The following non-security bug was...

SUSE-SU-2015:1482-1 Recommended update for openldap2

openldap2 was updated to fix one security issue. This security issue was fixed: - CVE-2015-4000: The Logjam Attack / weakdh.org bsc937766. This non-security issue was fixed: - bsc932773: ldapmodify failed with DOS format LDIF files containing '-' separator...

SUSE SLED12 / SLES12 Security Update : openldap2 (SUSE-SU-2015:1077-1)

openldap2 was updated to fix two security issues and one non-security bug. The following vulnerabilities were fixed : - A remote attacker could cause a denial of service through a NULL pointer dereference and crash via an empty attribute list in a deref control in a search request. bnc916897...

SUSE-SU-2015:1077-1 Security update for openldap2

openldap2 was updated to fix two security issues and one non-security bug. The following vulnerabilities were fixed: A remote attacker could cause a denial of service through a NULL pointer dereference and crash via an empty attribute list in a deref control in a search request. bnc916897...

SuSE 11.3 Security Update : openldap2 (SAT Patch Number 10635)

openldap2 was updated to fix three security issues and one non-security bug. The following vulnerabilities were fixed : - A remote attacker could cause a denial of service slapd crash by unbinding immediately after a search request. bnc846389, CVE-2013-4449 - A remote attacker could cause a denia...

SUSE Linux Enterprise Information Disclosure

The vulnerability of the openldap2-client-32bit package on the SUSE Linux Enterprise operating system can lead to a violation of the accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...

OpenSUSE Information Disclosure

The vulnerability of the openSUSE operating system’s openldap2-client-x86 package can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...

SUSE Linux Enterprise Information Disclosure

The vulnerability of the openldap2-client-x86 package in the SUSE Linux Enterprise operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...

SUSE-SU-2015:0887-1 Security update for openldap2

openldap2 was updated to fix three security issues and one non-security bug. The following vulnerabilities were fixed: A remote attacker could cause a denial of service slapd crash by unbinding immediately after a search request. bnc846389, CVE-2013-4449 A remote attacker could cause a denial of...

openSUSE Security Update : openldap2 (openSUSE-SU-2011:0363-1)

Master/slave configurations with enabled 'ppolicyforwardupdates' option potentially allowed users to log in with an invalid password CVE-2011-1024. unauthenticated users could crash the ldap server CVE-2011-1081. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...

openSUSE Security Update : openldap2 (openSUSE-SU-2011:0359-1)

Master/slave configurations with enabled 'ppolicyforwardupdates' option potentially allowed users to log in with an invalid password CVE-2011-1024. unauthenticated users could crash the ldap server CVE-2011-1081. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...

openSUSE Security Update : openldap2 (openSUSE-SU-2011:0356-1)

Master/slave configurations with enabled 'ppolicyforwardupdates' option potentially allowed users to log in with an invalid password CVE-2011-1024. unauthenticated users could crash the ldap server CVE-2011-1081. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...