CVE-2020-36229

A flaw was discovered in ldapX509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in adkeystring, resulting in denial of service...

CVE-2020-36223

A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service double free and out-of-bounds read...

CVE-2020-36223

CVE-2020-36223 affects OpenLDAP before 2.4.57 and causes a slapd crash due to a flaw in the Values Return Filter control handling, resulting in denial of service via a double free and an out-of-bounds read. The initial description and connected advisories identify the same root cause and impact, ...

CVE-2020-36230: Reachable Assertion

A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c bernextelement, resulting in denial of service...

CVE-2020-36222: Reachable Assertion

A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service...

CVE-2020-36224: Release of Invalid Pointer or Reference

A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service...

CVE-2020-36227: Loop with Unreachable Exit Condition

A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancelextop Cancel operation, resulting in denial of service...

CVE-2020-36228: Integer Underflow (Wrap or Wraparound)

An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service...

EulerOS 2.0 SP9 : openldap (EulerOS-SA-2021-1032)

According to the version of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated...

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55 during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request causing a Denial of Service.

...

Null pointer dereference

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service...

CVE-2020-25692

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service...

CVE-2020-25692: NULL Pointer Dereference

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service...

UBUNTU-CVE-2020-25709

A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability...

MGASA-2020-0407 Updated openldap packages fix a security vulnerability

A vulnerability in the handling of normalization with modrdn was discovered in OpenLDAP. An unauthenticated remote attacker can use this flaw to cause a denial of service slapd daemon crash via a specially crafted packet CVE-2020-25692. Also, the PID file path in the systemd service was fixed to...

PT-2020-6567 · Openldap +8 · Openldap +8

Name of the Vulnerable Software and Affected Versions: OpenLDAP affected versions not specified Description: A flaw was found in OpenLDAP, allowing an attacker to trigger an assertion failure by sending a malicious packet to be processed by OpenLDAP's slapd server. This flaw poses the highest...

UBUNTU-CVE-2020-25692

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service...

openldap: denial of service via nested boolean expressions in LDAP search filters

In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service daemon crash...

SUSE SLES12 Security Update : openldap2 (SUSE-SU-2020:1859-1)

This update for openldap2 fixes the following issues : CVE-2020-8023: Fixed a potential local privilege escalation from ldap to root when OPENLDAPCONFIGBACKEND='ldap' was used bsc1172698. Changed DBCONFIG to root:ldap permissions bsc1172704. Fixed an issue where slapd becomes unresponsive after...

SUSE-SU-2020:1859-1 Security update for openldap2

This update for openldap2 fixes the following issues: - CVE-2020-8023: Fixed a potential local privilege escalation from ldap to root when OPENLDAPCONFIGBACKEND='ldap' was used bsc1172698. - Changed DBCONFIG to root:ldap permissions bsc1172704. - Fixed an issue where slapd becomes unresponsive...