Photon OS 1.0: Openldap PHSA-2017-0024

An update of the openldap package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0024. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121713;...

Denial Of Service (DoS)

openldap is vulnerable to denial of service DoS attacks. The vulnerability exists as the bergetnext function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service reachable assertion and application crash via crafted BER data, as demonstrate...

Denial Of Service (DoS)

openldap is vulnerable to denial of service DoS attacks. The vulnerability exists as an off-by-one error leading to a crash was discovered in openldap's processing of DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS response...

Denial Of Service (DoS)

openldap is vulnerable to denial of service DoS attacks. The vulnerability exists as the rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service slapd crash by unbinding immediately after a search request,...

Weak Cipher Suite

openldap is uses weak cipher suite by default. The default cipher suite is always used in libraries/libldap/tlsm.c in OpenLDAP, when using the Mozilla NSS backend, even when TLSCipherSuite is set, which might cause OpenLDAP to use weaker ciphers than intended and make it easier for remote attacke...

Denial Of Service (Dos)

openldap is vulnerable to denial of service. An assertion failure and daemon exit occurs in slapd when an LDAP search query with attrsOnly set to true returns empty attributes. This allows a remote attacker to exploit the vulnerability to crash the process...

Photon OS 1.0: Libxml2 / Ncurses / Openldap / Ruby PHSA-2017-0024 (deprecated)

An update of ncurses,openldap,libxml2,ruby packages for PhotonOS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0024. The text itself is copyright C...

Security Bulletin: IBM Security Access Manager appliances are affected by a vulnerability in OpenLDAP (CVE-2015-6908)

Summary IBM Security Access Manager appliances use OpenLDAP. A vulnerability has been identified in OpenLDAP that affects the IBM Security Access Manager appliances. IBM Security Access Manager has addressed this vulnerability. Vulnerability Details CVEID: CVE-2015-6908 DESCRIPTION: OpenLDAP is...

Security Bulletin: A vulnerability in OpenLDAP affects PowerKVM

Summary PowerKVM is affected by a vulnerability in OpenLDAP. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-9287 DESCRIPTION: OpenLDAP is vulnerable to a denial of service, caused by a double free memory error in servers/slapd/back-mdb/search.c. By issuing a searc...

Security Bulletin: A vulnerability in openLDAP affects IBM Flex System Manager(FSM) (CVE-2015-6908)

Summary A security vulnerability has been discovered in openLDAP that is embedded in the IBM FSM. This bulletin addresses the vulnerability. Vulnerability Details CVEID: CVE-2015-6908 DESCRIPTION: OpenLDAP is vulnerable to a denial of service, caused by an assertion error in the bergetnext...

Security Bulletin: Vulnerabilities in OpenLDAP affect PowerKVM (CVE-2015-3276, CVE-2015-6908)

Summary PowerKVM is affected by two vulnerabilities in OpenLDAP. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-3276 DESCRIPTION: OpenLDAP could allow a remote attacker to bypass security restrictions, caused by the failure to properly parse OpenSSL-style cipher string...

Security Bulletin: A vulnerability in OpenLDAP affects IBM Tivoli Composite Application Manager for Transactions (CVE-2015-6908)

Summary A vulnerability in OpenLDAP 2.4.42 was disclosed on September 10, 2015 by openldap.org as a fix in OpenLDAP 2.4.43 ITS8240. OpenLDAP 2.4.44, used by IBM Tivoli Composite Application Manager for Transactions, has addressed the vulnerability. Vulnerability Details CVE-ID: CVE-2015-6908...

Security Bulletin: IBM Security Access Manager Appliance is affected by an OpenLDAP vulnerability (CVE-2017-9287)

Summary IBM Security Access Manager Appliance has addressed the following vulnerability in OpenLDAP. Vulnerability Details CVEID: CVE-2017-9287 DESCRIPTION: OpenLDAP is vulnerable to a denial of service, caused by a double free memory error in servers/slapd/back-mdb/search.c. By issuing a search...

Security Bulletin: IBM Security Access Manager appliances are affected by a vulnerability in OpenLDAP (CVE-2015-6908)

Summary A vulnerability in OpenLDAP affects IBM Security Access Manager appliances. Vulnerability Details CVEID: CVE-2015-6908 DESCRIPTION: OpenLDAP is vulnerable to a denial of service, caused by an assertion error in the bergetnext function. By sending a specially-crafted packet, a remote...

EulerOS 2.0 SP2 : curl (EulerOS-SA-2018-1110)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that libcurl did not safely parse FTP URLs when using the CURLOPTFTPFILEMETHOD method. An attacker, able to provide a specially craft...

OpenLDAP Zero Size PagedResultsControl Double Free Denial Of Service (CVE-2017-9287) - Ver2

A denial-of-service vulnerability exists in OpenLDAP. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

CVE-2018-1000121

A NULL pointer dereference flaw was found in the way libcurl checks values returned by the openldap ldapgetattributeber function. A malicious LDAP server could use this flaw to crash a libcurl client application via a specially crafted LDAP reply...

Debian: Security Advisory (DLA-972-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2018-0033 Updated openldap packages fix security vulnerability

A double-free flaw was found in the way OpenLDAP's slapd server using the MDB backend handled LDAP searches. A remote attacker with access to search the directory could potentially use this flaw to crash slapd by issuing a specially crafted LDAP search query CVE-2017-9287. The openldap package ha...

Updated openldap packages fix security vulnerability

A double-free flaw was found in the way OpenLDAP's slapd server using the MDB backend handled LDAP searches. A remote attacker with access to search the directory could potentially use this flaw to crash slapd by issuing a specially crafted LDAP search query CVE-2017-9287. The openldap package ha...