Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-4724-1
HistoryFeb 08, 2021 - 12:00 a.m.

OpenLDAP vulnerabilities

2021-02-0800:00:00
ubuntu.com
111

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8.8 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.11 Low

EPSS

Percentile

95.0%

JSON

Releases

  • Ubuntu 20.10
  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM

Packages

  • openldap - Lightweight Directory Access Protocol

Details

It was discovered that OpenLDAP incorrectly handled Certificate Exact
Assertion processing. A remote attacker could possibly use this issue to
cause OpenLDAP to crash, resulting in a denial of service. (CVE-2020-36221)

It was discovered that OpenLDAP incorrectly handled saslAuthzTo processing.
A remote attacker could use this issue to cause OpenLDAP to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(CVE-2020-36222, CVE-2020-36224, CVE-2020-36225, CVE-2020-36226)

It was discovered that OpenLDAP incorrectly handled Return Filter control
handling. A remote attacker could use this issue to cause OpenLDAP to
crash, resulting in a denial of service, or possibly execute arbitrary
code. (CVE-2020-36223)

It was discovered that OpenLDAP incorrectly handled certain cancel
operations. A remote attacker could possibly use this issue to cause
OpenLDAP to crash, resulting in a denial of service. (CVE-2020-36227)

It was discovered that OpenLDAP incorrectly handled Certificate List
Extract Assertion processing. A remote attacker could possibly use this
issue to cause OpenLDAP to crash, resulting in a denial of service.
(CVE-2020-36228)

It was discovered that OpenLDAP incorrectly handled X.509 DN parsing. A
remote attacker could possibly use this issue to cause OpenLDAP to crash,
resulting in a denial of service. (CVE-2020-36229, CVE-2020-36230)

OSVersionArchitecturePackageVersionFilename
Ubuntu20.10noarchslapd< 2.4.53+dfsg-1ubuntu1.3UNKNOWN
Ubuntu20.10noarchldap-utils< 2.4.53+dfsg-1ubuntu1.3UNKNOWN
Ubuntu20.10noarchldap-utils-dbgsym< 2.4.53+dfsg-1ubuntu1.3UNKNOWN
Ubuntu20.10noarchlibldap-2.4-2< 2.4.53+dfsg-1ubuntu1.3UNKNOWN
Ubuntu20.10noarchlibldap-2.4-2-dbgsym< 2.4.53+dfsg-1ubuntu1.3UNKNOWN
Ubuntu20.10noarchlibldap-common< 2.4.53+dfsg-1ubuntu1.3UNKNOWN
Ubuntu20.10noarchlibldap2-dev< 2.4.53+dfsg-1ubuntu1.3UNKNOWN
Ubuntu20.10noarchslapd-contrib< 2.4.53+dfsg-1ubuntu1.3UNKNOWN
Ubuntu20.10noarchslapd-contrib-dbgsym< 2.4.53+dfsg-1ubuntu1.3UNKNOWN
Ubuntu20.10noarchslapd-dbgsym< 2.4.53+dfsg-1ubuntu1.3UNKNOWN
Rows per page:
1-10 of 461

Related

nessus 32
debian 3
photon 8
osv 23
openvas 27
redos 1
mageia 1
suse 1
amazon 3
rosalinux 1
ibm 2
ics 3
cve 10
alpinelinux 10
redhatcve 10
checkpoint_advisories 1
veracode 10
prion 10
debiancve 10
cbl_mariner 10
ubuntucve 10
apple 3
nessus
nessus
EulerOS 2.0 SP9 : openldap (EulerOS-SA-2021-1269)
2021-02-05 00:00:00
Debian DSA-4845-1 : openldap - security update
2021-02-04 00:00:00
Debian DLA-2544-1 : openldap security update
2021-02-04 00:00:00
debian
debian
[SECURITY] [DSA 4845-1] openldap security update
2021-02-03 09:53:09
[SECURITY] [DLA 2544-1] openldap security update
2021-02-03 10:05:26
[SECURITY] [DSA 4845-1] openldap security update
2021-02-03 09:53:09
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-2.0-0318
2021-02-12 00:00:00
Important Photon OS Security Update - PHSA-2021-0318
2021-02-12 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-1.0-0366
2021-03-03 00:00:00
osv
osv
openldap - security update
2021-02-03 00:00:00
openldap vulnerabilities
2021-02-08 12:55:14
openldap - security update
2021-02-03 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-4845-1)
2021-02-04 00:00:00
Debian: Security Advisory (DLA-2544-1)
2021-02-04 00:00:00
OpenLDAP < 2.4.57 Multiple DoS Vulnerabilities
2021-10-27 00:00:00
redos
redos
ROS-20211223-03
2021-12-23 00:00:00
mageia
mageia
Updated openldap packages fix security vulnerabilities
2021-03-04 19:53:32
suse
suse
Security update for openldap2 (important)
2021-03-14 00:00:00
amazon
amazon
Important: openldap
2023-04-27 16:19:00
Important: openldap
2023-04-27 18:37:00
Medium: openldap
2021-09-08 23:35:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1935
2021-07-02 17:36:08
ibm
ibm
Security Bulletin: OpenLDAP publicly disclosed vulnerabilities affects MessageGateway (CCVE-2020-36230, CVE-2020-36229)
2021-02-23 17:18:58
Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to multiple CVEs
2023-03-08 18:05:21
ics
ics
Hitachi Energy RTU500 OpenLDAP
2022-01-06 12:00:00
Hitachi Energy System Data Manager
2022-04-26 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
cve
cve
CVE-2020-36229
2021-01-26 18:15:00
CVE-2020-36228
2021-01-26 18:15:00
CVE-2020-36224
2021-01-26 18:15:00
alpinelinux
alpinelinux
CVE-2020-36228
2021-01-26 18:15:00
CVE-2020-36224
2021-01-26 18:15:00
CVE-2020-36230
2021-01-26 18:15:00
redhatcve
redhatcve
CVE-2020-36228
2021-01-27 23:56:56
CVE-2020-36229
2021-01-27 23:58:08
CVE-2020-36226
2021-01-27 23:56:42
checkpoint_advisories
checkpoint_advisories
OpenLDAP Integer Underflow (CVE-2020-36228)
2022-09-20 00:00:00
veracode
veracode
Integer Overflow
2021-04-29 12:14:08
Denial Of Service (DoS)
2021-04-29 12:13:55
Denial Of Service (DoS)
2021-04-29 12:13:40
prion
prion
Denial of service
2021-01-26 18:15:00
Double free
2021-01-26 18:15:00
Design/Logic Flaw
2021-01-26 18:15:00
debiancve
debiancve
CVE-2020-36230
2021-01-26 18:15:00
CVE-2020-36228
2021-01-26 18:15:00
CVE-2020-36224
2021-01-26 18:15:00
cbl_mariner
cbl_mariner
CVE-2020-36230 affecting package openldap 2.4.50-3
2021-04-06 23:50:10
CVE-2020-36225 affecting package openldap 2.4.50-3
2021-04-06 23:50:10
CVE-2020-36223 affecting package openldap 2.4.50-3
2021-04-06 23:50:10
ubuntucve
ubuntucve
CVE-2020-36223
2021-01-26 00:00:00
CVE-2020-36230
2021-01-26 00:00:00
CVE-2020-36228
2021-01-26 00:00:00
apple
apple
About the security content of Security Update 2021-004 Mojave
2021-05-24 00:00:00
About the security content of Security Update 2021-003 Catalina
2021-05-24 00:00:00
About the security content of macOS Big Sur 11.4
2021-05-24 00:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8.8 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.11 Low

EPSS

Percentile

95.0%

JSON
Related for USN-4724-1
nessus32debian3photon8osv23openvas27redos1mageia1suse1amazon3rosalinux1ibm2ics3cve10alpinelinux10redhatcve10checkpoint_advisories1veracode10prion10debiancve10cbl_mariner10ubuntucve10apple3