Lucene search
K

15 matches found

OSV
OSV
added 2026/04/21 12:4 a.m.1 views

JLSEC-2026-160

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service...

7.5CVSS7.1AI score0.04749EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2009-2451

Malware in sbrugna...

5CVSS6.2AI score0.02234EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2025/08/25 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2016-4992

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - 389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7...

7.5CVSS7AI score0.00444EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2022/11/08 11:39 a.m.1 views

nodejs: Incorrect handling of certificate subject and issuer fields

A flaw was found in node.js, where it did not properly handle multi-value Relative Distinguished Names. This flaw allows a specially crafted x509 certificate to produce a false multi-value Relative Distinguished Name and to inject arbitrary data in node.js libraries...

5.3CVSS7.4AI score0.00364EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2022/06/21 12:40 p.m.0 views

nodejs: Incorrect handling of certificate subject and issuer fields

A flaw was found in node.js, where it did not properly handle multi-value Relative Distinguished Names. This flaw allows a specially crafted x509 certificate to produce a false multi-value Relative Distinguished Name and to inject arbitrary data in node.js libraries...

5.3CVSS7.4AI score0.00364EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2022/06/07 8:24 a.m.0 views

nodejs: Incorrect handling of certificate subject and issuer fields

A flaw was found in node.js, where it did not properly handle multi-value Relative Distinguished Names. This flaw allows a specially crafted x509 certificate to produce a false multi-value Relative Distinguished Name and to inject arbitrary data in node.js libraries...

5.3CVSS7.4AI score0.00364EPSS
Exploits1References5
OSV
OSV
added 2022/02/24 7:15 p.m.0 views

UBUNTU-CVE-2021-44533

Node.js 12.22.9, 14.18.3, 16.13.2, and 17.3.1 did not handle multi-value Relative Distinguished Names correctly. Attackers could craft certificate subjects containing a single-value Relative Distinguished Name that would be interpreted as a multi-value Relative Distinguished Name, for example, in...

5.3CVSS6.8AI score0.00364EPSS
Exploits1References4
Prion
Prion
added 2022/02/24 7:15 p.m.18 views

Code injection

Node.js 12.22.9, 14.18.3, 16.13.2, and 17.3.1 did not handle multi-value Relative Distinguished Names correctly. Attackers could craft certificate subjects containing a single-value Relative Distinguished Name that would be interpreted as a multi-value Relative Distinguished Name, for example, in...

5CVSS6.2AI score0.00364EPSS
Exploits1References6Affected Software9
RedhatCVE
RedhatCVE
added 2022/01/14 8:45 p.m.25 views

CVE-2021-44533

A flaw was found in node.js, where it did not properly handle multi-value Relative Distinguished Names. This flaw allows a specially crafted x509 certificate to produce a false multi-value Relative Distinguished Name and to inject arbitrary data in node.js libraries...

7.4CVSS2.7AI score0.00364EPSS
Exploits1References4
OSV
OSV
added 2020/12/08 1:15 a.m.2 views

DEBIAN-CVE-2020-25692

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service...

7.5CVSS7.5AI score0.04749EPSS
Exploits0References1
OSV
OSV
added 2020/12/08 1:15 a.m.1 views

ALPINE-CVE-2020-25692

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service...

7.5CVSS6.9AI score0.04749EPSS
Exploits0References1
OSV
OSV
added 2017/06/08 7:29 p.m.0 views

UBUNTU-CVE-2016-4992

389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to infer the existence of RDN component objects...

7.5CVSS7AI score0.00444EPSS
Exploits0References3
Prion
Prion
added 2011/03/20 2:0 a.m.23 views

Design/Logic Flaw

modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service daemon crash via a relative Distinguished Name DN modification request aka MODRDN operation that contains an empty value for the OldDN field...

5CVSS6.9AI score0.0271EPSS
Exploits1References20Affected Software1
RedHat Linux
RedHat Linux
added 2011/03/10 8:44 p.m.0 views

openldap: DoS when submitting special MODRDN request

modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service daemon crash via a relative Distinguished Name DN modification request aka MODRDN operation that contains an empty value for the OldDN field...

5CVSS5.9AI score0.0271EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2010/07/23 12:0 a.m.19 views

RedHat Update for openldap RHSA-2010:0542-01

Check for the Version of openldap OpenVAS Vulnerability Test RedHat Update for openldap RHSA-2010:0542-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

5CVSS8.8AI score0.66867EPSS
Exploits2References2
Rows per page
Query Builder