Debian DLA-309-1 : openldap security update

Denis Andzakovic discovered that OpenLDAP, a free implementation of the Lightweight Directory Access Protocol, does not properly handle BER data. An unauthenticated remote attacker can use this flaw to cause a denial of service slapd daemon crash via a specially crafted packet. The Squeeze-LTS...

[SECURITY] [DLA 309-1] openldap security update

Package : openldap Version : 2.4.23-7.3+deb6u2 CVE ID : CVE-2015-6908 Debian Bug : 798622 Denis Andzakovic discovered that OpenLDAP, a free implementation of the Lightweight Directory Access Protocol, does not properly handle BER data. An unauthenticated remote attacker can use this flaw to cause...

OpenLDAP 2.4.42 Denial Of Service

, , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. OpenLDAP getbernext Denial of Service Affected Versions: OpenLDAP = 2.4.42 PDF:...

OpenLDAP DoS

Crash on processing BER data...

[SECURITY] [DSA 3356-1] openldap security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3356-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 12, 2015 https://www.debian.org/security/faq...

FreeBSD : openldap -- denial of service vulnerability (4910d161-58a4-11e5-9ad8-14dae9d210b8)

Denis Andzakovic reports : By sending a crafted packet, an attacker may cause the OpenLDAP server to reach an assert9 9 statement, crashing the daemon. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML...

Debian DSA-3356-1 : openldap - security update

Denis Andzakovic discovered that OpenLDAP, a free implementation of the Lightweight Directory Access Protocol, does not properly handle BER data. An unauthenticated remote attacker can use this flaw to cause a denial of service slapd daemon crash via a specially crafted packet. %NASLMINLEVEL 7030...

VMSA-2015-0006:VMware vCenter Server updates address a LDAP certificate validation issue

VMSA-2015-0006.1 VMware vCenter Server updates address a LDAP certificate validation issue VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2015-0006.1 VMware Security AdvisorySynopsis: VMware vCenter Server updates address a LDAP certificate validation issue VMware Security...

DLA-309-1 openldap - security update

Bulletin has no description...

[SECURITY] [DSA 3356-1] openldap security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3356-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 12, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3356-1] openldap security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3356-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 12, 2015 https://www.debian.org/security/faq -...

OpenLDAP 2.4.42 - ber_get_next Denial of Service Vulnerability

OpenLDAP versions 2.4.42 and below suffer from a remote denial of service vulnerability. Exploit Title: OpenLDAP 2.4.42 bergetnext DOS Date: 11/09/15 Exploit Author: Denis Andzakovic Vendor Homepage: http://www.openldap.org/ Software Link:...

Debian Security Advisory DSA 3356-1 (openldap - security update)

Denis Andzakovic discovered that OpenLDAP, a free implementation of the Lightweight Directory Access Protocol, does not properly handle BER data. An unauthenticated remote attacker can use this flaw to cause a denial of service slapd daemon crash via a specially crafted packet. OpenVAS...

openldap: denial of service

By sending a crafted packet, an attacker can cause the OpenLDAP daemon to crash with a SIGABRT. This is due to an assert call within the bergetnext method io.c line 682 that is hit when decoding tampered BER data. The following proof of concept exploit can be used to trigger the condition: echo...

DSA-3356-1 openldap - security update

Bulletin has no description...

CVE-2015-6908

The bergetnext function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service reachable assertion and application crash via crafted BER data, as demonstrated by an attack against slapd...

CVE-2015-6908

The bergetnext function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service reachable assertion and application crash via crafted BER data, as demonstrated by an attack against slapd...

DEBIAN-CVE-2015-6908

The bergetnext function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service reachable assertion and application crash via crafted BER data, as demonstrated by an attack against slapd...

Code injection

The bergetnext function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service reachable assertion and application crash via crafted BER data, as demonstrated by an attack against slapd...

CVE-2015-6908

OpenLDAP vulnerability CVE-2015-6908 arises from ber_get_next in libraries/liblber/io.c on OpenLDAP 2.4.42 and earlier. A remote attacker can send crafted BER data to cause a denial-of-service via a slapd crash (assertion failure). Exploitation is demonstrated by published advisories and PoCs; im...