Latest openldap openldap Vulnerabilities

● CVE-2023-2953
A vulnerability was found in openldap that can cause a null pointer dereference in the ber_memalloc_x() function.
Openldap Openldap=2.4
Redhat Enterprise Linux=8.0
Redhat Enterprise Linux=9.0
Apple macOS>=11.0<11.7.9
Apple macOS>=12.0<12.6.8
Apple macOS>=13.0<13.5
and 33 more
● CVE-2022-29155
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur durin...
Openldap Openldap>=2.0<2.5.12
Openldap Openldap>=2.6.0<2.6.2
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Debian Debian Linux=11.0
Apple macOS Ventura
and 12 more
● CVE-2021-27212
In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon...
Openldap Openldap<=2.4.57
Openldap Openldap=2.5.0-alpha
Openldap Openldap=2.5.1-alpha
Debian Debian Linux=9.0
Debian Debian Linux=10.0
debian/openldap
● CVE-2020-36225
A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
Openldap Openldap<2.4.57
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Apple macOS>=11.1<11.4
Apple macOS Big Sur<11.4
debian/openldap
● CVE-2020-36226
A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.
Openldap Openldap<2.4.57
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Apple Mac OS X>=10.14.0<10.14.6
Apple Mac OS X=10.14.6
Apple Mac OS X=10.14.6-security_update_2019-004
and 20 more
● CVE-2020-36227
A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.
Openldap Openldap<2.4.57
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Apple macOS>=11.1<11.4
Apple Catalina
debian/openldap
● CVE-2020-36229
A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in ad_keystring, resulting in denial of service.
Openldap Openldap<2.4.57
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Apple Mac OS X>=10.14.0<10.14.6
Apple Mac OS X=10.14.6
Apple Mac OS X=10.14.6-security_update_2019-004
and 17 more
● CVE-2020-36230
A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service.
Openldap Openldap<2.4.57
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Apple Mac OS X>=10.14.0<10.14.6
Apple Mac OS X=10.14.6
Apple Mac OS X=10.14.6-security_update_2019-004
and 18 more
● CVE-2020-36228
An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service.
debian/openldap
Apple Catalina
Apple Mojave
Apple macOS Big Sur<11.4
Openldap Openldap<2.4.57
Debian Debian Linux=9.0
and 2 more
● CVE-2020-36224
A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
Openldap Openldap<2.4.57
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Apple Mac OS X>=10.14.0<10.14.6
Apple Mac OS X=10.14.6
Apple Mac OS X=10.14.6-security_update_2019-004
and 18 more
● CVE-2020-36221
An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssue...
Openldap Openldap<2.4.57
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Apple Mac OS X>=10.14.0<10.14.6
Apple Mac OS X=10.14.6
Apple Mac OS X=10.14.6-security_update_2019-004
and 18 more
● CVE-2020-36223
A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).
Openldap Openldap<2.4.57
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Apple Mac OS X>=10.14.0<10.14.6
Apple Mac OS X=10.14.6
Apple Mac OS X=10.14.6-security_update_2019-004
and 19 more
● CVE-2020-36222
A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.
Openldap Openldap<2.4.57
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Apple Mac OS X>=10.14.0<10.14.6
Apple Mac OS X=10.14.6
Apple Mac OS X=10.14.6-security_update_2019-004
and 18 more
● CVE-2020-25710
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest thr...
Openldap Openldap<2.4.56
Microsoft .NET 7.0
Redhat Jboss Enterprise Application Platform=5.0.0
Redhat Jboss Enterprise Web Server=2.0.0
Redhat Enterprise Linux=5.0
Redhat Enterprise Linux=6.0
and 5 more
● CVE-2020-25709
OpenLDAP. This issue was addressed with improved checks.
debian/openldap
redhat/openldap<2.4.56
Apple macOS Big Sur<11.2
Apple Catalina
Apple Mojave
Openldap Openldap<2.4.56
and 22 more
● CVE-2020-25692
OpenLDAP is vulnerable to a denial of service, caused by a NULL pointer dereference. By sending a specially crafted TCP packet, a remote attacker could exploit this vulnerability to cause slapd to cra...
IBM Cloud Pak for Security (CP4S)<=1.7.2.0
IBM Cloud Pak for Security (CP4S)<=1.7.1.0
IBM Cloud Pak for Security (CP4S)<=1.7.0.0
Openldap Openldap<2.4.55
Redhat Enterprise Linux=5.0
Redhat Enterprise Linux=6.0
and 5 more
● CVE-2020-15719
libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectA...
Openldap Openldap<2.4.46-10.el8
Redhat Enterprise Linux=8.0
openSUSE Leap=15.1
openSUSE Leap=15.2
McAfee Policy Auditor<6.5.1
Oracle Blockchain Platform<21.1.2
● CVE-2020-12243
In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).
ubuntu/openldap<2.4.50
ubuntu/openldap<2.4.45+dfsg-1ubuntu1.5
ubuntu/openldap<2.4.48+dfsg-1ubuntu1.1
ubuntu/openldap<2.4.49+dfsg-2ubuntu1.2
ubuntu/openldap<2.4.31-1+
ubuntu/openldap<2.4.42+dfsg-2ubuntu3.8
and 138 more
● CVE-2019-13565
An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain...
Apple macOS Catalina<10.15.2
Apple Mojave
Apple High Sierra
Openldap Openldap>=2.0<=2.4.47
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
and 32 more
● CVE-2019-13057
An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN (database admin) privileges for certain databases but wants to maintain isolation (e.g.,...
Apple macOS Catalina<10.15.2
Apple Mojave
Apple High Sierra
Openldap Openldap<2.4.48
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
and 32 more

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203