Lucene search
K

20 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.2 views

Astra Linux - уязвимость в apache2

A out-of-bounds read vulnerability exists in the modmacro module of the Apache HTTP Server. This issue affects the Apache HTTP Server version up to 2.4.57...

7.5CVSS6.8AI score0.00396EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/05/11 12:0 a.m.4 views

Unity Linux 20.1060e / 20.1070e Security Update: openldap (UTSA-2026-017524)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017524 advisory. A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service...

7.5CVSS6.9AI score0.01452EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/05/11 12:0 a.m.4 views

Unity Linux 20.1060e / 20.1070e Security Update: openldap (UTSA-2026-017595)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017595 advisory. In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet,...

7.5CVSS5.8AI score0.25115EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2026/05/11 12:0 a.m.2 views

Unity Linux 20.1060e / 20.1070e Security Update: openldap (UTSA-2026-017543)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017543 advisory. A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch-bvlen miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service...

7.5CVSS6.9AI score0.01074EPSS
Exploits0References4
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.3 views

Astra Linux - уязвимость в openldap

An integer underflow was discovered in OpenLDAP before version 2.4.57, which led to slapd crashes during the Certificate Exact Assertion processing, resulting in a denial of service schemainit.c serialNumberAndIssuerCheck...

7.5CVSS6.9AI score0.66197EPSS
Exploits0References1
OSV
OSV
added 2026/04/21 12:4 a.m.2 views

JLSEC-2026-169

A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancelextop Cancel operation, resulting in denial of service...

7.5CVSS6.9AI score0.6363EPSS
Exploits0References28
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2020-36221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of...

7.5CVSS6.8AI score0.66197EPSS
Exploits0References2
OSV
OSV
added 2023/11/03 11:6 a.m.1 views

OESA-2023-1790 httpd security update

Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server. Security Fixes: Out-of-bounds Read vulnerability in modmacro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57. CVE-2023-31122...

7.5CVSS7AI score0.00396EPSS
Exploits0References2
OSV
OSV
added 2023/10/23 7:15 a.m.1 views

DEBIAN-CVE-2023-31122

Out-of-bounds Read vulnerability in modmacro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57...

7.5CVSS6.7AI score0.00396EPSS
Exploits0References1
OSV
OSV
added 2023/10/23 7:15 a.m.1 views

AZL-31610 CVE-2023-43622 affecting package httpd for versions less than 2.4.58-1

An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server. This could be used to exhaust worker resources in the server, similar to the well known "slow loris" attack pattern. This has been fixed in...

7.5CVSS7AI score0.59544EPSS
Exploits0References1
OSV
OSV
added 2023/10/23 7:15 a.m.1 views

UBUNTU-CVE-2023-31122

Out-of-bounds Read vulnerability in modmacro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57...

7.5CVSS6.8AI score0.00396EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2023/10/19 12:0 a.m.34 views

Apache HTTP Server < 2.4.58 'mod_macro' Out-of-bounds Read Vulnerability - Windows

Apache HTTP Server is prone to an out-of-bounds read vulnerability in modmacro. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS7.6AI score0.00396EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2023/10/19 12:0 a.m.28 views

Apache HTTP Server 2.4.55 - 2.4.57 DoS Vulnerability - Linux

Apache HTTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS7.5AI score0.59544EPSS
Exploits0References2
CBLMariner
CBLMariner
added 2022/06/26 3:29 a.m.12 views

CVE-2022-29155 affecting package openldap for versions less than 2.4.57-7

CVE-2022-29155 affecting package openldap for versions less than 2.4.57-7. A patched version of the package is available...

9.8CVSS9.7AI score0.13614EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2021/01/27 11:56 p.m.37 views

CVE-2020-36222

A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service...

7.5CVSS7.4AI score0.46067EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2021/01/27 11:53 p.m.35 views

CVE-2020-36223

A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service double free and out-of-bounds read...

7.5CVSS7.4AI score0.10569EPSS
Exploits0References3
Prion
Prion
added 2021/01/26 6:15 p.m.15 views

Design/Logic Flaw

A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancelextop Cancel operation, resulting in denial of service...

5CVSS7.2AI score0.6363EPSS
Exploits0References14Affected Software3
CNVD
CNVD
added 2021/01/26 12:0 a.m.8 views

OpenLDAP Infinite Loop Vulnerability

OpenLDAP is a free, open source implementation of the Lightweight Directory Access Protocol LDAP. A slapd infinite loop vulnerability exists in the cancelextop Cancel operation in OpenLDAP versions prior to 2.4.57. An attacker could exploit this vulnerability to cause a denial of service...

7.5CVSS6.4AI score0.6363EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/01/26 12:0 a.m.2 views

OpenLDAP 安全漏洞

OpenLDAP is a free, open source implementation of the Lightweight Directory Access Protocol LDAP. A slapd assertion failure vulnerability exists in saslAuthzTo authentication in OpenLDAP versions prior to 2.4.57. An attacker could exploit this vulnerability to cause a denial of service...

7.5CVSS5.8AI score0.46067EPSS
Exploits0References29
Positive Technologies
Positive Technologies
added 2021/01/25 12:0 a.m.1 views

PT-2021-5534 · Openldap +7 · Openldap +7

Name of the Vulnerable Software and Affected Versions: OpenLDAP versions prior to 2.4.57 Description: The issue is related to a double free vulnerability in the OpenLDAP protocol, which can be exploited by a remote attacker to cause a denial of service DoS by sending a specially crafted request t...

7.8CVSS6.7AI score0.7152EPSS
Exploits1References161
Rows per page
Query Builder