USN-6616-1: OpenLDAP vulnerability
Published Jan 30, 2024
·Updated
It was discovered that OpenLDAP was not properly performing bounds checks when executing functions related to LDAP URLs. An attacker could possibly use this issue to cause a denial of service.
Affected Software
4 affected componentsFixes available
All of the following
ubuntu/slapd<2.5.16+dfsg-0ubuntu0.22.04.2
2.5.16+dfsg-0ubuntu0.22.04.2
Ubuntu Ubuntu=22.04
All of the following
ubuntu/slapd<2.4.49+dfsg-2ubuntu1.10
2.4.49+dfsg-2ubuntu1.10
Ubuntu Ubuntu=20.04
Event History
Jan 30, 2024
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-6616-1?
USN-6616-1 has a severity classified as potentially high due to the possibility of denial of service attacks.
2
How do I fix USN-6616-1?
To fix USN-6616-1, update OpenLDAP to versions 2.5.16+dfsg-0ubuntu0.22.04.2 or later for Ubuntu 22.04, or to 2.4.49+dfsg-2ubuntu1.10 or later for Ubuntu 20.04.
3
What software is affected by USN-6616-1?
USN-6616-1 affects OpenLDAP versions prior to the specified remedies in Ubuntu 20.04 and 22.04.
4
Can USN-6616-1 be exploited remotely?
Yes, USN-6616-1 can potentially be exploited remotely, allowing attackers to disrupt service.
5
What are the possible consequences of USN-6616-1?
The consequences of USN-6616-1 may include service interruptions leading to denial of service.