Lucene search
K

2399 matches found

Prion
Prion
added 2021/05/28 11:15 a.m.29 views

Design/Logic Flaw

A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23. The highest threat from this vulnerability is to system availability...

5CVSS7.1AI score0.02666EPSS
Exploits0References7Affected Software6
CVE
CVE
added 2021/05/28 10:20 a.m.325 views

CVE-2020-25710

Summary of CVE-2020-25710 (OpenLDAP) : A vulnerability in OpenLDAP prior to 2.4.56 allows an attacker sending a crafted packet to cause a failed assertion in csnNormalize23(), with the highest impact on availability (DoS). The issue is rooted in OpenLDAP’s handling of CSN normalization when proce...

7.5CVSS7.2AI score0.02666EPSS
Exploits0References7Affected Software1
Cvelist
Cvelist
added 2021/05/28 10:20 a.m.26 views

CVE-2020-25710

A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23. The highest threat from this vulnerability is to system availability...

7.3AI score0.02666EPSS
Exploits0References7
Debian CVE
Debian CVE
added 2021/05/28 10:20 a.m.28 views

CVE-2020-25710

A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23. The highest threat from this vulnerability is to system availability...

7.5CVSS7.8AI score0.02666EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2021/05/28 10:20 a.m.26 views

CVE-2020-25710

A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23. The highest threat from this vulnerability is to system availability...

7.5CVSS7.5AI score0.02666EPSS
Exploits0
CNNVD
CNNVD
added 2021/05/24 12:0 a.m.2 views

OpenLDAP 安全漏洞

OpenLDAP is an open source implementation of the Lightweight Directory Access Protocol LDAP from the OpenLDAP Openldap Foundation in the United States. A security vulnerability exists in OpenLDAP, which can be exploited by an attacker to send a malicious packet to OpenLDAP's slapd server for...

7.5CVSS7.8AI score0.01094EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2021/05/24 12:0 a.m.47 views

Amazon Linux 2 : openldap (ALAS-2021-1638)

The version of openldap installed on the remote host is prior to 2.4.44-23. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1638 advisory. A NULL pointer dereference flaw was found in the OpenLDAP server, during a request for renaming RDNs. This flaw allows a remote,...

7.5CVSS7.3AI score0.02183EPSS
Exploits0References3
Amazon
Amazon
added 2021/05/24 12:0 a.m.34 views

Medium: openldap

Issue Overview: A NULL pointer dereference flaw was found in the OpenLDAP server, during a request for renaming RDNs. This flaw allows a remote, unauthenticated attacker to crash the slapd process by sending a specially crafted request, causing a denial of service. The highest threat from this...

7.5CVSS7.7AI score0.02183EPSS
Exploits0
OpenVAS
OpenVAS
added 2021/05/19 12:0 a.m.16 views

Huawei EulerOS: Security Advisory for openldap (EulerOS-SA-2021-1881)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.84224EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2021/05/19 12:0 a.m.19 views

Huawei EulerOS: Security Advisory for openldap (EulerOS-SA-2021-1906)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.84224EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2021/05/19 12:0 a.m.24 views

Huawei EulerOS: Security Advisory for compat-openldap (EulerOS-SA-2021-1916)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.77738EPSS
Exploits0References2
OSV
OSV
added 2021/05/18 12:15 p.m.1 views

ALPINE-CVE-2020-25709

A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability...

7.5CVSS6.5AI score0.02858EPSS
Exploits0References1
NVD
NVD
added 2021/05/18 12:15 p.m.26 views

CVE-2020-25709

A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability...

7.5CVSS0.02858EPSS
Exploits0References8
OSV
OSV
added 2021/05/18 12:15 p.m.26 views

CVE-2020-25709

A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability...

7.5CVSS6.2AI score
Exploits0References8
Prion
Prion
added 2021/05/18 12:15 p.m.24 views

Design/Logic Flaw

A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability...

5CVSS7.1AI score0.02858EPSS
Exploits0References8Affected Software4
Cvelist
Cvelist
added 2021/05/18 11:51 a.m.125 views

CVE-2020-25709

A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability...

7.4AI score0.02858EPSS
Exploits0References8
CVE
CVE
added 2021/05/18 11:51 a.m.323 views

CVE-2020-25709

CVE-2020-25709 is an OpenLDAP vulnerability where processing a malicious packet by slapd can trigger an assertion failure, primarily threatening availability. The affected component is OpenLDAP’s slapd with a focus on Certificate List syntax validation. Public advisories confirm a denial-of-servi...

7.5CVSS7.2AI score0.02858EPSS
Exploits0References8Affected Software1
Debian CVE
Debian CVE
added 2021/05/18 11:51 a.m.25 views

CVE-2020-25709

A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability...

7.5CVSS7.8AI score0.02858EPSS
Exploits0
EUVD
EUVD
added 2021/05/18 11:51 a.m.2 views

EUVD-2020-18364

A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability...

7.5CVSS7.3AI score0.02858EPSS
Exploits0References13
AlpineLinux
AlpineLinux
added 2021/05/18 11:51 a.m.64 views

CVE-2020-25709

A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability...

7.5CVSS7.5AI score0.02858EPSS
Exploits0
Rows per page
Query Builder