CVE-2020-36223

A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service double free and out-of-bounds read...

PT-2021-5550

Name of the Vulnerable Software and Affected Versions OpenLDAP versions prior to 2.4.57 Description The issue is related to an assertion failure during syntactic analysis in the OpenLDAP implementation, which can be exploited by a remote attacker to cause a denial of service DoS by sending a...

CVE-2020-36222: Reachable Assertion

A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service...

CVE-2020-36223: Out-of-bounds Read

A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service double free and out-of-bounds read...

CVE-2020-36226: Undefined Security Weakness

A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch-bvlen miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service...

CVE-2020-36221: Integer Underflow (Wrap or Wraparound)

An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service schemainit.c serialNumberAndIssuerCheck...

CVE-2020-36229: Access of Resource Using Incompatible Type

A flaw was discovered in ldapX509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in adkeystring, resulting in denial of service...

CVE-2020-36230: Reachable Assertion

A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c bernextelement, resulting in denial of service...

PT-2021-5534

Name of the Vulnerable Software and Affected Versions OpenLDAP versions prior to 2.4.57 Description The issue is related to a double free vulnerability in the OpenLDAP protocol, which can be exploited by a remote attacker to cause a denial of service DoS by sending a specially crafted request to...

PT-2021-5551

Name of the Vulnerable Software and Affected Versions OpenLDAP versions prior to 2.4.57 Description The issue is related to an incompatible type access in the OpenLDAP protocol implementation. It allows a remote attacker to send a specially crafted request to slapd, potentially leading to a denia...

PT-2021-5552

Name of the Vulnerable Software and Affected Versions OpenLDAP versions prior to 2.4.57 Description An integer underflow was discovered in the Certificate List Exact Assertion processing, resulting in a denial of service. This issue can be exploited by a remote attacker, allowing them to send a...

PT-2021-5535

Name of the Vulnerable Software and Affected Versions OpenLDAP versions prior to 2.4.57 Description The issue is related to an integer underflow in the OpenLDAP implementation, which can be exploited by a remote attacker to cause a denial of service. This is achieved by sending a specially crafte...

PT-2021-5549

Name of the Vulnerable Software and Affected Versions OpenLDAP versions prior to 2.4.57 Description The issue is related to an invalid pointer free or reference release in the OpenLDAP implementation. Exploitation of this issue can allow a remote attacker to cause a denial of service by sending a...

PT-2021-5533

Name of the Vulnerable Software and Affected Versions OpenLDAP versions prior to 2.4.57 Description A flaw in OpenLDAP leads to a memch-bv len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service. The issue is related to a resource management error. An...

PT-2021-5555

Name of the Vulnerable Software and Affected Versions OpenLDAP versions prior to 2.4.57 Description The issue is related to an insufficient use of the assert function in the open implementation of the OpenLDAP protocol. It may allow a remote attacker to execute a denial of service attack by sendi...

CVE-2020-36227: Loop with Unreachable Exit Condition

A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancelextop Cancel operation, resulting in denial of service...

CVE-2020-36228: Integer Underflow (Wrap or Wraparound)

An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service...

CVE-2020-36225: Double Free

A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service...

CVE-2020-36224: Release of Invalid Pointer or Reference

A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service...

EulerOS 2.0 SP3 : openldap (EulerOS-SA-2021-1103)

According to the version of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated...