CVE-2022-0918

CVE-2022-0918 Red Hat CVE page: https://access.redhat.com/security/cve/cve-2022-0918 Github issue with patches linked: https://github.com/389ds/389-ds-base/issues/5242 PoC The PoC application takes in a single IP, either IPv4 or IPv6 will work. By default it will send the message to port 389, thi...

CentOS Linux 8 [TuxCare] Security Update: openldap / openldap-clients / openldap-devel / openldap-servers Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2024:1722003515)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2024:1722003515 advisory. - In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateChec...

Astra Linux – Vulnerability in OpenLDAP

A flaw was discovered in OpenLDAP before version 2.4.57, which led to a double-free and slapd crash during the saslAuthzTo process, resulting in a denial of service...

Astra Linux – vulnerability in openldap

A flaw was found in OpenLDAP. This flaw allows an attacker capable of sending a malicious packet to have their packet processed by OpenLDAP’s slapd server, resulting in an assertion failure. The primary threat posed by this vulnerability is system availability...

Astra Linux – Vulnerability in OpenLDAP

In OpenLDAP versions 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function due to a malicious packet. This leads to a denial of service daemon exits caused by a short timestamp. This issue is related to the schemainit.c file and the...

Astra Linux – Vulnerability in OpenLDAP

A flaw was discovered in OpenLDAP before version 2.4.57, which led to an invalid pointer issue and a crash in the slapd process during the saslAuthzTo processing step. This caused a denial-of-service attack...

Astra Linux – vulnerability in openldap

A flaw was discovered in OpenLDAP prior to version 2.4.57, leading to an incorrect calculation of memch-bvlen and a crash in slapd during the saslAuthzTo process, ultimately causing a denial of service...

Astra Linux – Vulnerability in OpenLDAP

A flaw was discovered in OpenLDAP before version 2.4.57, which led to an assertion failure in slapd’s saslAuthzTo validation process, resulting in a denial of service...

Astra Linux – vulnerability in openldap

An integer underflow was found in OpenLDAP prior to version 2.4.57, leading to a slapd crash during the Certificate List Exact Assertion processing, which resulted in a denial of service...

Rocky Linux 9 [CIQ] Security Update: 389-ds-base / 389-ds-base-debuginfo / 389-ds-base-debugsource / etc Multiple Vulnerabilities (crlsa-2024_3837)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243837 advisory. 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request CVE-2024-3657 389-ds-base: Malformed userPassword may cause crash at...

Rocky Linux 8 [CIQ] Security Update: 389-ds-base / 389-ds-base-debuginfo / 389-ds-base-debugsource / etc Multiple Vulnerabilities (crlsa-2024_4235)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20244235 advisory. 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request CVE-2024-3657 389-ds-base: Malformed userPassword may cause crash at...

CentOS Linux 6 [TuxCare] Security Update: openldap / openldap-clients / openldap-devel / openldap-servers / etc Multiple Vulnerabilities (CENTOS6:CLSA-2025:1758645818)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2025:1758645818 advisory. - An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the SASL...

CentOS Linux 8.5 [TuxCare] Security Update: openldap / openldap-clients / openldap-devel / openldap-servers Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1777310722)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1777310722 advisory. - An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the...

CentOS Linux 8.4 [TuxCare] Security Update: openldap / openldap-clients / openldap-devel / openldap-servers Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1777393215)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1777393215 advisory. - An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the...

CentOS Linux 7 [TuxCare] Security Update: openldap / openldap-clients / openldap-devel / openldap-servers / etc Multiple Vulnerabilities (CENTOS7:CLSA-2023:1695834945)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2023:1695834945 advisory. - In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: openldap (UTSA-2026-090144)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090144 advisory. In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service daemon crash. Tenable has extract...

Astra Linux – Vulnerability in the 389-DS-base

A vulnerability was discovered in the 389 Directory Server, which allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, without the need for any bind or other...

Unity Linux 20.1060e / 20.1070e Security Update: openldap (UTSA-2026-017537)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017537 advisory. A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancelextop Cancel operation, resulting in denial of service. Tenable h...

Unity Linux 20.1060e / 20.1070e Security Update: openldap (UTSA-2026-017543)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017543 advisory. A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch-bvlen miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service...

Unity Linux 20.1060e / 20.1070e Security Update: openldap (UTSA-2026-017550)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017550 advisory. An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of...