AZL-27011 CVE-2023-2953 affecting package openldap for versions less than 2.4.57-9

A vulnerability was found in openldap. This security flaw causes a null pointer dereference in bermemallocx function...

SUSE CVE-2023-2953

A vulnerability was found in openldap. This security flaw causes a null pointer dereference in bermemallocx function...

CVE-2023-2953

A vulnerability was found in openldap. This security flaw causes a null pointer dereference in bermemallocx function...

CVE-2023-2953

A vulnerability was found in openldap. This security flaw causes a null pointer dereference in bermemallocx function...

PT-2023-3768 · Openldap +12 · Openldap +12

Name of the Vulnerable Software and Affected Versions: OpenLDAP affected versions not specified Description: The issue is related to a null pointer dereference in the ber memalloc x function. This can be exploited by a remote attacker to cause a denial of service. The estimated number of...

SUSE CVE-2011-4079

Off-by-one error in the UTF8StringNormalize function in OpenLDAP 2.4.26 and earlier allows remote attackers to cause a denial of service slapd crash via a zero-length string that triggers a heap-based buffer overflow, as demonstrated using an empty postalAddressAttribute value in an LDIF entry...

SUSE CVE-2015-1546

Double free vulnerability in the getvrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of service crash via a crafted search query with a matched values control...

Openldap Doesn’t Properly Handle Character in Subject Common Name (CVE-2009-3767)

Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. A TLS library in OpenLDAP, when OpenSSL is used, does not properly handle a '\0' NULL character in a domain name in the subject's Common Name CN field of an X.509 certificate, which...

SUSE-SU-2022:3549-1 Security update for cyrus-sasl

This update for cyrus-sasl fixes the following issues: - CVE-2019-19906: Fixed an out-of-bounds write that could lead to unauthenticated remote denial of service in OpenLDAP via a malformed LDAP packet bsc1159635...

Ubuntu 16.04 ESM : OpenLDAP vulnerability (USN-5424-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5424-2 advisory. USN-5424-1 fixed a vulnerability in OpenLDAP. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has extracted the...

Vulnerability fixed in OpenLDAP

A vulnerability has been fixed in OpenLDAP. The vulnerability allows a malicious person to perform an SQL injection. The is a vulnerability in the back-sql backend. This backend is no longer actively supported but is still available in OpenLDAP. The developers of OpenLDAP have released updates to...

The vulnerability of the csnNormalize23() function in the LDAP OpenLDAP implementation, related to the insufficient use of the assert() function, allows a perpetrator to cause a service failure.

The vulnerability of the csnNormalize23 function in the LDAP OpenLDAP implementation is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause service failures using a malicious package...

The vulnerability of the open implementation of the OpenLDAP protocol lies in the possibility of releasing an invalid pointer or reference, allowing a malicious actor to perform a denial-of-service attack.

The vulnerability of the open implementation of the OpenLDAP protocol lies in the possibility of allowing an invalid pointer or reference to be released. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform a denial-of-service attack by sending a specially...

The vulnerability of the open implementation of the OpenLDAP protocol, related to a countable loss of significance, allows a violator to perform a denial-of-service attack.

The vulnerability of the open implementation of the OpenLDAP protocol is related to a numerical exhaustion during the processing of a precise approval request for the list of certificates. Exploiting this vulnerability allows a malicious actor to perform a denial-of-service attack by sending a...

Security Bulletin: IBM Security Guardium is affected by an OpenLDAP vulnerability (CVE-2020-25692)

Summary IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID: CVE-2020-25692 DESCRIPTION: OpenLDAP is vulnerable to a denial of service, caused by a NULL pointer dereference. By sending a specially crafted TCP packet, a remote attacker could exploit this vulnerability to...

Security Bulletin: IBM MQ Appliance is affected by an OpenLDAP vulnerability (CVE-2020-25692)

Summary IBM MQ Appliance has resolved an OpenLDAP vulnerability. Vulnerability Details CVEID: CVE-2020-25692 DESCRIPTION: OpenLDAP is vulnerable to a denial of service, caused by a NULL pointer dereference. By sending a specially crafted TCP packet, a remote attacker could exploit this...

Vulnerability fixed in OpenLDAP

A vulnerability has been fixed in OpenLDAP. The vulnerability allows an unauthenticated remote malicious party to cause a denial-of-service attack. The developers of OpenLDAP have released updates to fix the vulnerability. More information can be found at the page below:...

USN-4744-1 openldap vulnerability

Pasi Saarinen discovered that OpenLDAP incorrectly handled certain short timestamps. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service...

OpenLDAP Double Release and Out-of-Bounds Read Vulnerability

OpenLDAP is a free, open source implementation of the Lightweight Directory Access Protocol LDAP. A double release and out-of-bounds read vulnerability exists in OpenLDAP versions prior to 2.4.57. An attacker could exploit this vulnerability to cause a slapd crash in the Values Return Filter...

OpenLDAP Integer Overflow Vulnerability

OpenLDAP is a free, open source implementation of the Lightweight Directory Access Protocol LDAP. An integer underflow vulnerability exists in OpenLDAP versions prior to 2.4.57. An attacker could exploit this vulnerability to cause a slapd crash in Certificate List Exact Assertion processing...