Lucene search
+L

116 matches found

OSV
OSV
•added 2023/05/30 10:15 p.m.•17 views

AZL-27011 CVE-2023-2953 affecting package openldap for versions less than 2.4.57-9

A vulnerability was found in openldap. This security flaw causes a null pointer dereference in bermemallocx function...

7.5CVSS6.6AI score0.0193EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2023/05/30 2:22 a.m.•6 views

SUSE CVE-2023-2953

A vulnerability was found in openldap. This security flaw causes a null pointer dereference in bermemallocx function...

5.9CVSS7.3AI score0.0193EPSS
SaveExploits0References78
OSV
OSV
•added 2023/05/30 12:00 a.m.•13 views

CVE-2023-2953

A vulnerability was found in openldap. This security flaw causes a null pointer dereference in bermemallocx function...

7.5CVSS7.5AI score
SaveExploits0References11
Vulnrichment
Vulnrichment
•added 2023/05/30 12:00 a.m.•7 views

CVE-2023-2953

A vulnerability was found in openldap. This security flaw causes a null pointer dereference in bermemallocx function...

6.8AI score0.0193EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2023/05/29 12:00 a.m.•6 views

PT-2023-3768

Name of the Vulnerable Software and Affected Versions OpenLDAP affected versions not specified Description The issue is related to a null pointer dereference in the ber memalloc x function. This can be exploited by a remote attacker to cause a denial of service. The estimated number of potentiall...

7.8CVSS6.7AI score0.0193EPSS
SaveExploits0References66
SUSE CVE
SUSE CVE
•added 2023/02/15 5:50 a.m.•12 views

SUSE CVE-2011-4079

Off-by-one error in the UTF8StringNormalize function in OpenLDAP 2.4.26 and earlier allows remote attackers to cause a denial of service slapd crash via a zero-length string that triggers a heap-based buffer overflow, as demonstrated using an empty postalAddressAttribute value in an LDIF entry...

4CVSS6.5AI score0.0327EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 5:21 a.m.•8 views

SUSE CVE-2015-1546

Double free vulnerability in the getvrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of service crash via a crafted search query with a matched values control...

5CVSS6.8AI score0.03413EPSS
SaveExploits0References6
Ivanti
Ivanti
•added 2023/02/14 7:22 a.m.•11 views

Openldap Doesn’t Properly Handle Character in Subject Common Name (CVE-2009-3767)

Last Modified Date Aug 23, 2026 9:03:30 PM...

4.3CVSS5.9AI score0.03273EPSS
SaveExploits1
OSV
OSV
•added 2022/10/07 12:40 p.m.•16 views

SUSE-SU-2022:3549-1 Security update for cyrus-sasl

This update for cyrus-sasl fixes the following issues: - CVE-2019-19906: Fixed an out-of-bounds write that could lead to unauthenticated remote denial of service in OpenLDAP via a malformed LDAP packet bsc1159635...

7.5CVSS7.3AI score0.08036EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2022/05/19 12:00 a.m.•44 views

Ubuntu 16.04 ESM : OpenLDAP vulnerability (USN-5424-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5424-2 advisory. USN-5424-1 fixed a vulnerability in OpenLDAP. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has extracted the...

9.8CVSS7.7AI score0.64487EPSS
SaveExploits1References2
NCSC
NCSC
•added 2022/05/06 12:00 a.m.•9 views

Vulnerability fixed in OpenLDAP

A vulnerability has been fixed in OpenLDAP. The vulnerability allows a malicious person to perform an SQL injection. The is a vulnerability in the back-sql backend. This backend is no longer actively supported but is still available in OpenLDAP. The developers of OpenLDAP have released updates to...

9.8CVSS7.4AI score0.64487EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2022/01/17 12:00 a.m.•21 views

The vulnerability of the csnNormalize23() function in the LDAP OpenLDAP implementation, related to the insufficient use of the assert() function, allows a perpetrator to cause a service failure.

The vulnerability of the csnNormalize23 function in the LDAP OpenLDAP implementation is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause service failures using a malicious package...

7.5CVSS7.2AI score0.02666EPSS
SaveExploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
•added 2021/12/28 12:00 a.m.•15 views

The vulnerability of the open implementation of the OpenLDAP protocol lies in the possibility of releasing an invalid pointer or reference, allowing a malicious actor to perform a denial-of-service attack.

The vulnerability of the open implementation of the OpenLDAP protocol lies in the possibility of allowing an invalid pointer or reference to be released. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform a denial-of-service attack by sending a specially...

7.8CVSS7.1AI score0.043EPSS
SaveExploits0References26Affected Software8
BDU FSTEC
BDU FSTEC
•added 2021/12/28 12:00 a.m.•12 views

The vulnerability of the open implementation of the OpenLDAP protocol, related to a countable loss of significance, allows a violator to perform a denial-of-service attack.

The vulnerability of the open implementation of the OpenLDAP protocol is related to a numerical exhaustion during the processing of a precise approval request for the list of certificates. Exploiting this vulnerability allows a malicious actor to perform a denial-of-service attack by sending a...

7.8CVSS7.2AI score0.84994EPSS
SaveExploits0References12Affected Software7
IBM Security Bulletins
IBM Security Bulletins
•added 2021/11/04 3:36 p.m.•39 views

Security Bulletin: IBM Security Guardium is affected by an OpenLDAP vulnerability (CVE-2020-25692)

Summary IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID: CVE-2020-25692 DESCRIPTION: OpenLDAP is vulnerable to a denial of service, caused by a NULL pointer dereference. By sending a specially crafted TCP packet, a remote attacker could exploit this vulnerability to...

7.5CVSS1.5AI score0.02209EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2021/07/09 3:21 p.m.•59 views

Security Bulletin: IBM MQ Appliance is affected by an OpenLDAP vulnerability (CVE-2020-25692)

Summary IBM MQ Appliance has resolved an OpenLDAP vulnerability. Vulnerability Details CVEID: CVE-2020-25692 DESCRIPTION: OpenLDAP is vulnerable to a denial of service, caused by a NULL pointer dereference. By sending a specially crafted TCP packet, a remote attacker could exploit this...

7.5CVSS1.5AI score0.02209EPSS
SaveExploits0Affected Software1
NCSC
NCSC
•added 2021/02/23 12:00 a.m.•9 views

Vulnerability fixed in OpenLDAP

A vulnerability has been fixed in OpenLDAP. The vulnerability allows an unauthenticated remote malicious party to cause a denial-of-service attack. The developers of OpenLDAP have released updates to fix the vulnerability. More information can be found at the page below:...

7.5CVSS6.8AI score0.64147EPSS
SaveExploits1
OSV
OSV
•added 2021/02/22 2:22 p.m.•11 views

USN-4744-1 openldap vulnerability

Pasi Saarinen discovered that OpenLDAP incorrectly handled certain short timestamps. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service...

7.5CVSS7.2AI score0.64147EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/01/26 12:00 a.m.•15 views

OpenLDAP Infinite Loop Vulnerability

OpenLDAP is a free, open source implementation of the Lightweight Directory Access Protocol LDAP. A slapd infinite loop vulnerability exists in the cancelextop Cancel operation in OpenLDAP versions prior to 2.4.57. An attacker could exploit this vulnerability to cause a denial of service...

7.5CVSS7AI score0.77236EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/01/26 12:00 a.m.•16 views

OpenLDAP 安全漏洞

OpenLDAP is a free, open source implementation of the Lightweight Directory Access Protocol LDAP. A slapd security vulnerability exists in the X.509 DN parsing of decode.c bernextelement in OpenLDAP versions prior to 2.4.57. An attacker could exploit this vulnerability to cause a denial of servic...

7.5CVSS7AI score0.1229EPSS
SaveExploits0References31
Rows per page
Query Builder