DSA-4666: -1 openldap -- security update

Published Apr 28, 2020

Updated

A vulnerability was discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. LDAP search filters with nested boolean expressions can result in denial of service (slapd daemon crash).

Affected Software

2 affected components

debian/openldap

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade openldap to a version that resolves this vulnerability.
Patch DSA-4666-1

Event History

Apr 28, 2020

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2020-12243

Frequently Asked Questions

Which systems are exposed to this issue?

Systems running the OpenLDAP slapd daemon are exposed because the flaw can crash slapd when it processes LDAP search filters containing nested boolean expressions.

What does an attacker need to trigger the denial of service?

The attacker needs to submit an LDAP search filter with nested boolean expressions to a vulnerable slapd daemon. The available information does not state any authentication requirement.

What is the impact of successful exploitation?

Successful exploitation can cause the slapd daemon to crash, resulting in denial of service for LDAP operations handled by that daemon.

DSA-4666: -1 openldap -- security update

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which systems are exposed to this issue?

What does an attacker need to trigger the denial of service?

What is the impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which systems are exposed to this issue?

What does an attacker need to trigger the denial of service?

What is the impact of successful exploitation?