CVE-2020-15719

libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName SAN. This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat Enterprise Linux...

CVE-2020-15719

CVE-2020-15719 affects libldap in certain third‑party OpenLDAP packages. A certificate‑validation flaw occurs when RFC6125 support is asserted: CN is considered valid even if SAN does not match. The issue is fixed in at least openldap-2.4.46-10.el8 (Red Hat Enterprise Linux). The connected docume...

CVE-2020-15719

libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName SAN. This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat Enterprise Linux...

CVE-2020-15719

libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName SAN. This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat Enterprise Linux...

PT-2020-5834 · Openldap +5 · Openldap +5

Name of the Vulnerable Software and Affected Versions: OpenLDAP versions prior to 2.4.55 Description: The issue is related to a NULL pointer dereference in the OpenLDAP server, specifically during a request for renaming RDNs. This can be exploited by an unauthenticated attacker to remotely crash...

Huawei EulerOS: Security Advisory for openldap (EulerOS-SA-2020-1739)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.0 : openldap (EulerOS-SA-2020-1739)

According to the version of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of servic...

OpenLDAP Slapd Denial of Service (CVE-2020-12243)

A denial-of-service vulnerability exists in OpenLDAP Slapd. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Huawei EulerOS: Security Advisory for openldap (EulerOS-SA-2020-1701)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.6.0 : openldap (EulerOS-SA-2020-1701)

According to the version of the openldap packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denia...

EulerOS 2.0 SP2 : cyrus-sasl (EulerOS-SA-2020-1631)

According to the version of the cyrus-sasl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - cyrus-sasl aka Cyrus SASL 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDA...

EulerOS 2.0 SP2 : openldap (EulerOS-SA-2020-1685)

According to the version of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service daemon...

Huawei EulerOS: Security Advisory for cyrus-sasl (EulerOS-SA-2020-1631)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for openldap (EulerOS-SA-2020-1685)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for openldap (EulerOS-SA-2020-1612)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : openldap (EulerOS-SA-2020-1612)

According to the version of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service daemon...

EulerOS 2.0 SP8 : openldap (EulerOS-SA-2020-1585)

According to the version of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service daemon...

Huawei EulerOS: Security Advisory for openldap (EulerOS-SA-2020-1585)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Photon OS 2.0: Openldap PHSA-2020-2.0-0242

An update of the openldap package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0242. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Openldap PHSA-2020-1.0-0293

An update of the openldap package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0293. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...