CVE-2022-29155
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the...
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.
- Record
CVE-2022-29155- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE List No score
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.
- Record
CVE-2022-29155- Updated
- 2026-11-02
EUVDEUVD-2022-33563 No score
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.
- Record
EUVD-2022-33563- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-9rm2-9q89-9524
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the...
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.
- Record
GHSA-9rm2-9q89-9524- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-89
- Updated
- 2026-11-02
OSVALPINE-CVE-2022-29155
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.
- Record
ALPINE-CVE-2022-29155- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVAZL-9672
CVE-2022-29155 affecting package openldap for versions less than 2.4.57-7
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.
- Record
AZL-9672- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 21 moreShow less
OSVBELL-CVE-2022-29155
CVE-2022-29155 does not affect BellSoft software
- Record
BELL-CVE-2022-29155- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-29155
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.
- Record
DEBIAN-CVE-2022-29155- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVJLSEC-2026-174
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.
- Record
JLSEC-2026-174- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
OSVOESA-2022-1654
openldap security update
OpenLDAP is an open source suite of LDAP (Lightweight Directory Access Protocol) applications and development tools. LDAP is a set of protocols for accessing directory services (usually phone book style information, but other information is possible) over the Internet, similar to the way DNS (Domain Name System) information is propagated over the Internet. The openldap package contains configuration files, libraries, and documentation for OpenLDAP.
Security Fix(es):
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.(CVE-2022-29155)
- Record
OESA-2022-1654- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-29155
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.
- Record
UBUNTU-CVE-2022-29155- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVBIT-openldap-2022-29155 No score
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.
- Record
BIT-openldap-2022-29155- Updated
- 2026-11-02
OSVCLSA-2022-1652986454 No score
Fix CVE(s): CVE-2022-29155
- SECURITY UPDATE: SQL injection vulnerability
- debian/patches/CVE-2022-29155.patch: Escape filter values in servers/slapd/back-sql/search.c.
- CVE-2022-29155
- Record
CLSA-2022-1652986454- Updated
- 2026-11-02
OSVCLSA-2022-1652986513 No score
Fixed CVE-2022-29155 in openldap
- CVE-2022-29155: fix SQL injection vulnerability caused by LDAP search operation
- Record
CLSA-2022-1652986513- Updated
- 2026-11-02
OSVCLSA-2022-1652987203 No score
Fixed CVE-2022-29155 in openldap
- CVE-2022-29155: fix SQL injection vulnerability caused by LDAP search operation
- Record
CLSA-2022-1652987203- Updated
- 2026-11-02
OSVCLSA-2023-1695834945 No score
openldap: Fix of 2 CVEs
- CVE-2022-29155: fix a SQL injection vulnerability in the back-sql backend to slapd
- CVE-2021-27212: fix denial of service (daemon exit) via a short timestamp if slapd is used
- Record
CLSA-2023-1695834945- Updated
- 2026-11-02
OSVCLSA-2026-1777031791 No score
openldap: Fix of 2 CVEs
- CVE-2022-29155: fix a SQL injection vulnerability in the back-sql backend to slapd
- CVE-2021-27212: fix denial of service (daemon exit) via a short timestamp if slapd is used
- Record
CLSA-2026-1777031791- Updated
- 2026-11-02
OSVCLSA-2026-1777051819 No score
openldap: Fix of 2 CVEs
- CVE-2022-29155: fix a SQL injection vulnerability in the back-sql backend to slapd
- CVE-2021-27212: fix denial of service (daemon exit) via a short timestamp if slapd is used
- Record
CLSA-2026-1777051819- Updated
- 2026-11-02
OSV No score
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.
- Record
CVE-2022-29155- Updated
- 2026-11-02
OSVMGASA-2022-0205 No score
Updated openldap packages fix security vulnerability
SQL injection in back-sql (CVE-2022-29155)
- Record
MGASA-2022-0205- Updated
- 2026-11-02
OSVSUSE-SU-2022:1670-1 No score
Security update for openldap2
This update for openldap2 fixes the following issues:
- CVE-2022-29155: Fixed SQL injection in back-sql (bsc#1199240).
- Record
SUSE-SU-2022:1670-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1671-1 No score
Security update for openldap2
This update for openldap2 fixes the following issues:
- CVE-2022-29155: Fixed SQL injection in back-sql (bsc#1199240).
- Fixed issue with SASL init that crashed slapd at startup under certain conditions (bsc#1198383).
- Record
SUSE-SU-2022:1671-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1685-1 No score
Security update for openldap2
This update for openldap2 fixes the following issues:
- CVE-2022-29155: Fixed SQL injection in back-sql (bsc#1199240).
- Record
SUSE-SU-2022:1685-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1771-1 No score
Security update for openldap2
This update for openldap2 fixes the following issues:
- CVE-2022-29155: Fixed SQL injection in back-sql (bsc#1199240).
- Fixed issue with SASL init that crashed slapd at startup under certain conditions (bsc#1198383).
- Record
SUSE-SU-2022:1771-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1832-1 No score
Security update for openldap2
This update for openldap2 fixes the following issues:
Security:
- CVE-2022-29155: Fixed SQL injection in back-sql (bsc#1199240).
Bugfixes:
- allow specification of max/min TLS version with TLS1.3 (bsc#1191157)
- libldap was able to be out of step with openldap in some cases which could cause incorrect installations and symbol resolution failures. openldap2 and libldap now are locked to their related release versions. (bsc#1197004)
- restore CLDAP functionality in CLI tools (jsc#PM-3288)
- Record
SUSE-SU-2022:1832-1- Updated
- 2026-11-02
OSVUSN-5424-1 No score
openldap vulnerability
It was discovered that OpenLDAP incorrectly handled certain SQL statements within LDAP queries in the experimental back-sql backend. A remote attacker could possibly use this issue to perform an SQL injection attack and alter the database.
- Record
USN-5424-1- Updated
- 2026-11-02
OSVUSN-5424-2 No score
openldap vulnerability
USN-5424-1 fixed a vulnerability in OpenLDAP. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
Original advisory details:
It was discovered that OpenLDAP incorrectly handled certain SQL statements within LDAP queries in the experimental back-sql backend. A remote attacker could possibly use this issue to perform an SQL injection attack and alter the database.
- Record
USN-5424-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openldapAlpine:v3.15 |
2.0 up to 2.6.2-r0 | 2.6.2-r0 |
openldapAlpine:v3.16 |
2.0 up to 2.6.2-r0 | 2.6.2-r0 |
openldapAlpine:v3.17 |
2.0 up to 2.6.2-r0 | 2.6.2-r0 |
openldapAlpine:v3.18 |
2.0 up to 2.6.2-r0 | 2.6.2-r0 |
openldapAlpine:v3.19 |
2.0 up to 2.6.2-r0 | 2.6.2-r0 |
openldapAlpine:v3.20 |
2.0 up to 2.6.2-r0 | 2.6.2-r0 |
openldapAlpine:v3.21 |
2.0 up to 2.6.2-r0 | 2.6.2-r0 |
openldapAlpine:v3.22 |
2.0 up to 2.6.2-r0 | 2.6.2-r0 |
openldapAlpine:v3.23 |
2.0 up to 2.6.2-r0 | 2.6.2-r0 |
openldapAlpine:v3.24 |
2.0 up to 2.6.2-r0 | 2.6.2-r0 |
Show 93 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openldapAzure Linux:2 |
before 2.4.57-7 | 2.4.57-7 |
openldapBitnami |
2.0.0 up to 2.5.12, 2.6.0 up to 2.6.2 | 2.5.122.6.2 |
ldap-utilsTuxCare:Ubuntu:16.04 |
before 2.4.42+dfsg-2ubuntu3.13.tuxcare.els1 | 2.4.42+dfsg-2ubuntu3.13.tuxcare.els1 |
libldap-2.4-2TuxCare:Ubuntu:16.04 |
before 2.4.42+dfsg-2ubuntu3.13.tuxcare.els1 | 2.4.42+dfsg-2ubuntu3.13.tuxcare.els1 |
libldap2-devTuxCare:Ubuntu:16.04 |
before 2.4.42+dfsg-2ubuntu3.13.tuxcare.els1 | 2.4.42+dfsg-2ubuntu3.13.tuxcare.els1 |
slapdTuxCare:Ubuntu:16.04 |
before 2.4.42+dfsg-2ubuntu3.13.tuxcare.els1 | 2.4.42+dfsg-2ubuntu3.13.tuxcare.els1 |
slapd-smbk5pwdTuxCare:Ubuntu:16.04 |
before 2.4.42+dfsg-2ubuntu3.13.tuxcare.els1 | 2.4.42+dfsg-2ubuntu3.13.tuxcare.els1 |
openldapTuxCare:OracleLinux:6 |
before 2.4.40-16.el6.tuxcare.els2 | 2.4.40-16.el6.tuxcare.els2 |
openldap-clientsTuxCare:OracleLinux:6 |
before 2.4.40-16.el6.tuxcare.els2 | 2.4.40-16.el6.tuxcare.els2 |
openldap-develTuxCare:OracleLinux:6 |
before 2.4.40-16.el6.tuxcare.els2 | 2.4.40-16.el6.tuxcare.els2 |
openldap-serversTuxCare:OracleLinux:6 |
before 2.4.40-16.el6.tuxcare.els2 | 2.4.40-16.el6.tuxcare.els2 |
openldap-servers-sqlTuxCare:OracleLinux:6 |
before 2.4.40-16.el6.tuxcare.els2 | 2.4.40-16.el6.tuxcare.els2 |
openldapTuxCare:CentOS:8.4 |
before 2.4.46-17.el8_4.tuxcare.els2 | 2.4.46-17.el8_4.tuxcare.els2 |
openldap-clientsTuxCare:CentOS:8.4 |
before 2.4.46-17.el8_4.tuxcare.els2 | 2.4.46-17.el8_4.tuxcare.els2 |
openldap-develTuxCare:CentOS:8.4 |
before 2.4.46-17.el8_4.tuxcare.els2 | 2.4.46-17.el8_4.tuxcare.els2 |
openldap-serversTuxCare:CentOS:8.4 |
before 2.4.46-17.el8_4.tuxcare.els2 | 2.4.46-17.el8_4.tuxcare.els2 |
openldapTuxCare:CentOS:7 From an advisory covering 2 CVEs |
before 2.4.44-25.el7_9.tuxcare.els1 | 2.4.44-25.el7_9.tuxcare.els1 |
openldap-clientsTuxCare:CentOS:7 From an advisory covering 2 CVEs |
before 2.4.44-25.el7_9.tuxcare.els1 | 2.4.44-25.el7_9.tuxcare.els1 |
openldap-develTuxCare:CentOS:7 From an advisory covering 2 CVEs |
before 2.4.44-25.el7_9.tuxcare.els1 | 2.4.44-25.el7_9.tuxcare.els1 |
openldap-serversTuxCare:CentOS:7 From an advisory covering 2 CVEs |
before 2.4.44-25.el7_9.tuxcare.els1 | 2.4.44-25.el7_9.tuxcare.els1 |
openldap-servers-sqlTuxCare:CentOS:7 From an advisory covering 2 CVEs |
before 2.4.44-25.el7_9.tuxcare.els1 | 2.4.44-25.el7_9.tuxcare.els1 |
openldapTuxCare:OracleLinux:7 From an advisory covering 2 CVEs |
before 2.4.44-25.el7_9.tuxcare.els1 | 2.4.44-25.el7_9.tuxcare.els1 |
openldap-clientsTuxCare:OracleLinux:7 From an advisory covering 2 CVEs |
before 2.4.44-25.el7_9.tuxcare.els1 | 2.4.44-25.el7_9.tuxcare.els1 |
openldap-develTuxCare:OracleLinux:7 From an advisory covering 2 CVEs |
before 2.4.44-25.el7_9.tuxcare.els1 | 2.4.44-25.el7_9.tuxcare.els1 |
openldap-serversTuxCare:OracleLinux:7 From an advisory covering 2 CVEs |
before 2.4.44-25.el7_9.tuxcare.els1 | 2.4.44-25.el7_9.tuxcare.els1 |
openldap-servers-sqlTuxCare:OracleLinux:7 From an advisory covering 2 CVEs |
before 2.4.44-25.el7_9.tuxcare.els1 | 2.4.44-25.el7_9.tuxcare.els1 |
openldapTuxCare:RHEL:7 From an advisory covering 2 CVEs |
before 2.4.44-25.el7_9.tuxcare.els1 | 2.4.44-25.el7_9.tuxcare.els1 |
openldap-clientsTuxCare:RHEL:7 From an advisory covering 2 CVEs |
before 2.4.44-25.el7_9.tuxcare.els1 | 2.4.44-25.el7_9.tuxcare.els1 |
openldap-develTuxCare:RHEL:7 From an advisory covering 2 CVEs |
before 2.4.44-25.el7_9.tuxcare.els1 | 2.4.44-25.el7_9.tuxcare.els1 |
openldap-serversTuxCare:RHEL:7 From an advisory covering 2 CVEs |
before 2.4.44-25.el7_9.tuxcare.els1 | 2.4.44-25.el7_9.tuxcare.els1 |
openldap-servers-sqlTuxCare:RHEL:7 From an advisory covering 2 CVEs |
before 2.4.44-25.el7_9.tuxcare.els1 | 2.4.44-25.el7_9.tuxcare.els1 |
openldapDebian:12 |
before 2.5.12+dfsg-1 | 2.5.12+dfsg-1 |
openldapDebian:13 |
before 2.5.12+dfsg-1 | 2.5.12+dfsg-1 |
openldapDebian:14 |
before 2.5.12+dfsg-1 | 2.5.12+dfsg-1 |
openldapDebian:9 |
before 2.4.44+dfsg-5+deb9u9, plus listed versions 2.4.44+dfsg-52.4.44+dfsg-5+deb9u12.4.44+dfsg-5+deb9u1~bpo8+12.4.44+dfsg-5+deb9u22.4.44+dfsg-5+deb9u3 Show 5 moreShow less2.4.44+dfsg-5+deb9u42.4.44+dfsg-5+deb9u52.4.44+dfsg-5+deb9u62.4.44+dfsg-5+deb9u72.4.44+dfsg-5+deb9u8 |
2.4.44+dfsg-5+deb9u9 |
openldapDebian:10 |
before 2.4.47+dfsg-3+deb10u7, plus listed versions 2.4.47+dfsg-32.4.47+dfsg-3+deb10u12.4.47+dfsg-3+deb10u1~bpo9+12.4.47+dfsg-3+deb10u22.4.47+dfsg-3+deb10u2~bpo9+1 Show 4 moreShow less2.4.47+dfsg-3+deb10u32.4.47+dfsg-3+deb10u42.4.47+dfsg-3+deb10u52.4.47+dfsg-3+deb10u6 |
2.4.47+dfsg-3+deb10u7 |
openldapDebian:11 |
before 2.4.57+dfsg-3+deb11u1, plus listed versions 2.4.57+dfsg-32.4.57+dfsg-3+deb11u1~bpo10+1 |
2.4.57+dfsg-3+deb11u1 |
OpenLDAPClient_jllJulia |
before 2.5.14+0 | 2.5.14+0 |
openldapMageia:8 |
before 2.4.57-1.2.mga8 | 2.4.57-1.2.mga8 |
openldapopenEuler:20.03-LTS-SP1 |
before 2.4.50-7.oe1 | 2.4.50-7.oe1 |
openldapopenEuler:20.03-LTS-SP3 |
before 2.4.50-7.oe1 | 2.4.50-7.oe1 |
openldapopenEuler:22.03-LTS |
before 2.6.0-3.oe2203 | 2.6.0-3.oe2203 |
openldap2SUSE:Linux Enterprise Module for Basesystem 15 SP3 |
before 2.4.46-150200.14.8.1 | 2.4.46-150200.14.8.1 |
openldap2SUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 2.4.46-150200.14.8.1 | 2.4.46-150200.14.8.1 |
openldap2SUSE:Linux Enterprise Module for Development Tools 15 SP3 |
before 2.4.46-150200.14.8.1 | 2.4.46-150200.14.8.1 |
openldap2SUSE:Linux Enterprise Module for Development Tools 15 SP4 |
before 2.4.46-150200.14.8.1 | 2.4.46-150200.14.8.1 |
openldap2SUSE:Linux Enterprise Module for Legacy 15 SP3 |
before 2.4.46-150200.14.8.1 | 2.4.46-150200.14.8.1 |
openldap2SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS |
before 2.4.46-150200.14.8.1 | 2.4.46-150200.14.8.1 |
openldap2SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 2.4.46-150200.14.8.1 | 2.4.46-150200.14.8.1 |
openldap2SUSE:Linux Enterprise Server 15 SP2-BCL |
before 2.4.46-150200.14.8.1 | 2.4.46-150200.14.8.1 |
openldap2SUSE:Linux Enterprise Server 15 SP2-LTSS |
before 2.4.46-150200.14.8.1 | 2.4.46-150200.14.8.1 |
openldap2SUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 2.4.46-150200.14.8.1 | 2.4.46-150200.14.8.1 |
openldap2SUSE:Manager Proxy 4.1 |
before 2.4.46-150200.14.8.1 | 2.4.46-150200.14.8.1 |
openldap2SUSE:Manager Retail Branch Server 4.1 |
before 2.4.46-150200.14.8.1 | 2.4.46-150200.14.8.1 |
openldap2SUSE:Manager Server 4.1 |
before 2.4.46-150200.14.8.1 | 2.4.46-150200.14.8.1 |
openldap2SUSE:Linux Enterprise Micro 5.1 |
before 2.4.46-150200.14.8.1 | 2.4.46-150200.14.8.1 |
openldap2SUSE:Linux Enterprise Micro 5.2 |
before 2.4.46-150200.14.8.1 | 2.4.46-150200.14.8.1 |
openldap2SUSE:Enterprise Storage 7 |
before 2.4.46-150200.14.8.1 | 2.4.46-150200.14.8.1 |
openldap2openSUSE:Leap 15.3 |
before 2.4.46-150200.14.8.1 | 2.4.46-150200.14.8.1 |
openldap2openSUSE:Leap 15.4 |
before 2.4.46-150200.14.8.1 | 2.4.46-150200.14.8.1 |
openldap2SUSE:HPE Helion OpenStack 8 |
before 2.4.41-18.89.1 | 2.4.41-18.89.1 |
openldap2SUSE:OpenStack Cloud 8 |
before 2.4.41-18.89.1 | 2.4.41-18.89.1 |
openldap2SUSE:OpenStack Cloud Crowbar 8 |
before 2.4.41-18.89.1 | 2.4.41-18.89.1 |
openldap2SUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 2.4.41-18.89.1 | 2.4.41-18.89.1 |
openldap2SUSE:Linux Enterprise Server 12 SP2-BCL |
before 2.4.41-18.89.1 | 2.4.41-18.89.1 |
openldap2SUSE:Linux Enterprise Server 12 SP3-LTSS |
before 2.4.41-18.89.1 | 2.4.41-18.89.1 |
openldap2SUSE:Linux Enterprise Server 12 SP3-BCL |
before 2.4.41-18.89.1 | 2.4.41-18.89.1 |
openldap2SUSE:Linux Enterprise Module for Legacy 12 |
before 2.4.41-42.1 | 2.4.41-42.1 |
openldap2SUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 2.4.41-42.1 | 2.4.41-42.1 |
openldap2SUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 2.4.41-42.1 | 2.4.41-42.1 |
openldap2SUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 2.4.41-42.1 | 2.4.41-42.1 |
openldap2SUSE:OpenStack Cloud 9 |
before 2.4.41-22.10.1 | 2.4.41-22.10.1 |
openldap2SUSE:OpenStack Cloud Crowbar 9 |
before 2.4.41-22.10.1 | 2.4.41-22.10.1 |
openldap2SUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 2.4.41-22.10.1 | 2.4.41-22.10.1 |
openldap2SUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 2.4.41-22.10.1 | 2.4.41-22.10.1 |
openldap2SUSE:Linux Enterprise Server 12 SP4-LTSS |
before 2.4.41-22.10.1 | 2.4.41-22.10.1 |
openldap2SUSE:Linux Enterprise Server 12 SP5 |
before 2.4.41-22.10.1 | 2.4.41-22.10.1 |
openldap2SUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 2.4.41-22.10.1 | 2.4.41-22.10.1 |
openldap2SUSE:Linux Enterprise High Performance Computing 15-ESPOS |
before 2.4.46-150000.9.71.1 | 2.4.46-150000.9.71.1 |
openldap2SUSE:Linux Enterprise High Performance Computing 15-LTSS |
before 2.4.46-150000.9.71.1 | 2.4.46-150000.9.71.1 |
openldap2SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS |
before 2.4.46-150000.9.71.1 | 2.4.46-150000.9.71.1 |
openldap2SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 2.4.46-150000.9.71.1 | 2.4.46-150000.9.71.1 |
openldap2SUSE:Linux Enterprise Server 15-LTSS |
before 2.4.46-150000.9.71.1 | 2.4.46-150000.9.71.1 |
openldap2SUSE:Linux Enterprise Server 15 SP1-BCL |
before 2.4.46-150000.9.71.1 | 2.4.46-150000.9.71.1 |
openldap2SUSE:Linux Enterprise Server 15 SP1-LTSS |
before 2.4.46-150000.9.71.1 | 2.4.46-150000.9.71.1 |
openldap2SUSE:Linux Enterprise Server for SAP Applications 15 |
before 2.4.46-150000.9.71.1 | 2.4.46-150000.9.71.1 |
openldap2SUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 2.4.46-150000.9.71.1 | 2.4.46-150000.9.71.1 |
openldap2SUSE:Enterprise Storage 6 |
before 2.4.46-150000.9.71.1 | 2.4.46-150000.9.71.1 |
openldapUbuntu:Pro:14.04:LTS |
before 2.4.31-1+nmu2ubuntu8.5+esm5, plus listed versions 2.4.31-1+nmu2ubuntu32.4.31-1+nmu2ubuntu42.4.31-1+nmu2ubuntu52.4.31-1+nmu2ubuntu82.4.31-1+nmu2ubuntu8.1 Show 8 moreShow less2.4.31-1+nmu2ubuntu8.22.4.31-1+nmu2ubuntu8.32.4.31-1+nmu2ubuntu8.42.4.31-1+nmu2ubuntu8.52.4.31-1+nmu2ubuntu8.5+esm12.4.31-1+nmu2ubuntu8.5+esm22.4.31-1+nmu2ubuntu8.5+esm32.4.31-1+nmu2ubuntu8.5+esm4 |
2.4.31-1+nmu2ubuntu8.5+esm5 |
openldapUbuntu:Pro:16.04:LTS |
before 2.4.42+dfsg-2ubuntu3.13+esm1, plus listed versions 2.4.41+dfsg-1ubuntu22.4.41+dfsg-1ubuntu32.4.42+dfsg-2ubuntu12.4.42+dfsg-2ubuntu32.4.42+dfsg-2ubuntu3.1 Show 12 moreShow less2.4.42+dfsg-2ubuntu3.22.4.42+dfsg-2ubuntu3.32.4.42+dfsg-2ubuntu3.42.4.42+dfsg-2ubuntu3.52.4.42+dfsg-2ubuntu3.62.4.42+dfsg-2ubuntu3.72.4.42+dfsg-2ubuntu3.82.4.42+dfsg-2ubuntu3.92.4.42+dfsg-2ubuntu3.102.4.42+dfsg-2ubuntu3.112.4.42+dfsg-2ubuntu3.122.4.42+dfsg-2ubuntu3.13 |
2.4.42+dfsg-2ubuntu3.13+esm1 |
openldapUbuntu:18.04:LTS |
before 2.4.45+dfsg-1ubuntu1.11, plus listed versions 2.4.45+dfsg-1ubuntu12.4.45+dfsg-1ubuntu1.12.4.45+dfsg-1ubuntu1.22.4.45+dfsg-1ubuntu1.32.4.45+dfsg-1ubuntu1.4 Show 6 moreShow less2.4.45+dfsg-1ubuntu1.52.4.45+dfsg-1ubuntu1.62.4.45+dfsg-1ubuntu1.72.4.45+dfsg-1ubuntu1.82.4.45+dfsg-1ubuntu1.92.4.45+dfsg-1ubuntu1.10 |
2.4.45+dfsg-1ubuntu1.11 |
openldapUbuntu:20.04:LTS |
before 2.4.49+dfsg-2ubuntu1.9, plus listed versions 2.4.48+dfsg-1ubuntu12.4.48+dfsg-1ubuntu22.4.48+dfsg-1ubuntu32.4.48+dfsg-1ubuntu42.4.49+dfsg-1ubuntu1 Show 8 moreShow less2.4.49+dfsg-2ubuntu12.4.49+dfsg-2ubuntu1.22.4.49+dfsg-2ubuntu1.32.4.49+dfsg-2ubuntu1.42.4.49+dfsg-2ubuntu1.52.4.49+dfsg-2ubuntu1.62.4.49+dfsg-2ubuntu1.72.4.49+dfsg-2ubuntu1.8 |
2.4.49+dfsg-2ubuntu1.9 |
openldapUbuntu:22.04:LTS |
before 2.5.11+dfsg-1~exp1ubuntu3.1, plus listed versions 2.5.6+dfsg-1~exp1ubuntu12.5.11+dfsg-1~exp1ubuntu12.5.11+dfsg-1~exp1ubuntu3 |
2.5.11+dfsg-1~exp1ubuntu3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-29155 is a critical vulnerability (CVSS 9.8) in Openldap, published May 4, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 64.5%, the 99th percentile. Fixed in openldap 2.6.2-r0.
References
bugs.openldap.org/show_bug.cgi?id=9815
debian.org/security/2022/dsa-5140
lists.debian.org/debian-lts-announce/2022/05/msg00032.html
security.netapp.com/advisory/ntap-20220609-0007
cert-portal.siemens.com/productcert/html/ssa-398330.html
nvd.nist.gov/vuln/detail/CVE-2022-29155
Show 30 moreShow less
github.com/advisories/GHSA-9rm2-9q89-9524
security.alpinelinux.org/vuln/CVE-2022-29155
docs.bell-sw.com/security/cves/CVE-2022-29155
errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1652986454
errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1777031791.html
security-tracker.debian.org/tracker/CVE-2022-29155
advisories.mageia.org/MGASA-2022-0205.html
bugs.mageia.org/show_bug.cgi?id=30439
lists.suse.com/pipermail/sle-security-updates/2022-May/011028.html
lists.opensuse.org/archives/list/[email protected]/thread/CWSTVPRK33YGMF7RXMFQT7ZGRDJ7P6Y5
ubuntu.com/security/notices/USN-5424-1
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1654
suse.com/support/update/announcement/2022/suse-su-20221670-1
bugzilla.suse.com/1199240
cve.org/CVERecord?id=CVE-2022-29155