{"id":"CVE-2022-29155","aliases":["ALPINE-CVE-2022-29155","AZL-9672","BELL-CVE-2022-29155","BIT-openldap-2022-29155","CLSA-2022-1652986454","CLSA-2022-1652986513","CLSA-2022-1652987203","CLSA-2023-1695834945","CLSA-2026-1777031791","CLSA-2026-1777051819","DEBIAN-CVE-2022-29155","DLA-3017-1","DSA-5140-1","EUVD-2022-33563","GHSA-9rm2-9q89-9524","JLSEC-2026-174","MGASA-2022-0205","OESA-2022-1654","SUSE-SU-2022:1670-1","SUSE-SU-2022:1671-1","SUSE-SU-2022:1685-1","SUSE-SU-2022:1771-1","SUSE-SU-2022:1832-1","UBUNTU-CVE-2022-29155","USN-5424-1","USN-5424-2"],"status":"published","title":"In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the...","description":"In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.64487,"percentile":0.99243,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-89"],"published":"2022-05-04T19:06:09Z","modified":"2026-11-03T08:03:51Z","fixes":[{"ecosystem":"Alpine:v3.15","package":"openldap","fixed_in":["2.6.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openldap","fixed_in":["2.6.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openldap","fixed_in":["2.6.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openldap","fixed_in":["2.6.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openldap","fixed_in":["2.6.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openldap","fixed_in":["2.6.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openldap","fixed_in":["2.6.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openldap","fixed_in":["2.6.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openldap","fixed_in":["2.6.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openldap","fixed_in":["2.6.2-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"openldap","fixed_in":["2.4.57-7"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"openldap","fixed_in":["2.5.12","2.6.2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"ldap-utils","fixed_in":["2.4.42+dfsg-2ubuntu3.13.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libldap-2.4-2","fixed_in":["2.4.42+dfsg-2ubuntu3.13.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libldap2-dev","fixed_in":["2.4.42+dfsg-2ubuntu3.13.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"slapd","fixed_in":["2.4.42+dfsg-2ubuntu3.13.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"slapd-smbk5pwd","fixed_in":["2.4.42+dfsg-2ubuntu3.13.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"openldap","fixed_in":["2.4.40-16.el6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"openldap-clients","fixed_in":["2.4.40-16.el6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"openldap-devel","fixed_in":["2.4.40-16.el6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"openldap-servers","fixed_in":["2.4.40-16.el6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"openldap-servers-sql","fixed_in":["2.4.40-16.el6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openldap","fixed_in":["2.4.46-17.el8_4.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openldap-clients","fixed_in":["2.4.46-17.el8_4.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openldap-devel","fixed_in":["2.4.46-17.el8_4.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openldap-servers","fixed_in":["2.4.46-17.el8_4.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"openldap","fixed_in":["2.5.12+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openldap","fixed_in":["2.5.12+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openldap","fixed_in":["2.5.12+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"openldap","fixed_in":["2.4.44+dfsg-5+deb9u9"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"openldap","fixed_in":["2.4.47+dfsg-3+deb10u7"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"openldap","fixed_in":["2.4.57+dfsg-3+deb11u1"],"sources":["osv"]},{"ecosystem":"Julia","package":"OpenLDAPClient_jll","fixed_in":["2.5.14+0"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"openldap","fixed_in":["2.4.57-1.2.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"openldap","fixed_in":["2.4.50-7.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"openldap","fixed_in":["2.4.50-7.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"openldap","fixed_in":["2.6.0-3.oe2203"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"openldap2","fixed_in":["2.4.46-150200.14.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"openldap2","fixed_in":["2.4.46-150200.14.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"openldap2","fixed_in":["2.4.46-150200.14.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"openldap2","fixed_in":["2.4.46-150200.14.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP3","package":"openldap2","fixed_in":["2.4.46-150200.14.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"openldap2","fixed_in":["2.4.46-150200.14.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"openldap2","fixed_in":["2.4.46-150200.14.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"openldap2","fixed_in":["2.4.46-150200.14.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"openldap2","fixed_in":["2.4.46-150200.14.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"openldap2","fixed_in":["2.4.46-150200.14.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"openldap2","fixed_in":["2.4.46-150200.14.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"openldap2","fixed_in":["2.4.46-150200.14.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"openldap2","fixed_in":["2.4.46-150200.14.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"openldap2","fixed_in":["2.4.46-150200.14.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"openldap2","fixed_in":["2.4.46-150200.14.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"openldap2","fixed_in":["2.4.46-150200.14.8.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"openldap2","fixed_in":["2.4.46-150200.14.8.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"openldap2","fixed_in":["2.4.46-150200.14.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openldap2","fixed_in":["2.4.41-18.89.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"openldap2","fixed_in":["2.4.41-18.89.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openldap2","fixed_in":["2.4.41-18.89.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"openldap2","fixed_in":["2.4.41-18.89.1","2.4.41-42.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"openldap2","fixed_in":["2.4.41-18.89.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"openldap2","fixed_in":["2.4.41-18.89.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"openldap2","fixed_in":["2.4.41-18.89.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Legacy 12","package":"openldap2","fixed_in":["2.4.41-42.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openldap2","fixed_in":["2.4.41-42.1","2.4.41-22.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openldap2","fixed_in":["2.4.41-42.1","2.4.41-22.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"openldap2","fixed_in":["2.4.41-22.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openldap2","fixed_in":["2.4.41-22.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"openldap2","fixed_in":["2.4.41-22.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"openldap2","fixed_in":["2.4.41-22.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openldap2","fixed_in":["2.4.41-22.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"openldap2","fixed_in":["2.4.46-150000.9.71.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"openldap2","fixed_in":["2.4.46-150000.9.71.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"openldap2","fixed_in":["2.4.46-150000.9.71.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"openldap2","fixed_in":["2.4.46-150000.9.71.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"openldap2","fixed_in":["2.4.46-150000.9.71.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"openldap2","fixed_in":["2.4.46-150000.9.71.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"openldap2","fixed_in":["2.4.46-150000.9.71.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"openldap2","fixed_in":["2.4.46-150000.9.71.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"openldap2","fixed_in":["2.4.46-150000.9.71.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"openldap2","fixed_in":["2.4.46-150000.9.71.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openldap","fixed_in":["2.4.31-1+nmu2ubuntu8.5+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openldap","fixed_in":["2.4.42+dfsg-2ubuntu3.13+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"openldap","fixed_in":["2.4.45+dfsg-1ubuntu1.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"openldap","fixed_in":["2.4.49+dfsg-2ubuntu1.9"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openldap","fixed_in":["2.5.11+dfsg-1~exp1ubuntu3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.15","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0"},{"fixed":"2.6.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0"},{"fixed":"2.6.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0"},{"fixed":"2.6.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0"},{"fixed":"2.6.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0"},{"fixed":"2.6.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0"},{"fixed":"2.6.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0"},{"fixed":"2.6.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0"},{"fixed":"2.6.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0"},{"fixed":"2.6.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0"},{"fixed":"2.6.2-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57-7"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"openldap","ranges":[{"type":"SEMVER","events":[{"introduced":"2.0.0"},{"fixed":"2.5.12"},{"introduced":"2.6.0"},{"fixed":"2.6.2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"ldap-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.42+dfsg-2ubuntu3.13.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libldap-2.4-2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.42+dfsg-2ubuntu3.13.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libldap2-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.42+dfsg-2ubuntu3.13.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"slapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.42+dfsg-2ubuntu3.13.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"slapd-smbk5pwd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.42+dfsg-2ubuntu3.13.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.40-16.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.40-16.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.40-16.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.40-16.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.40-16.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-17.el8_4.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-17.el8_4.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-17.el8_4.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-17.el8_4.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.12+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.12+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.12+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44+dfsg-5+deb9u9"}]}],"versions":["2.4.44+dfsg-5","2.4.44+dfsg-5+deb9u1","2.4.44+dfsg-5+deb9u1~bpo8+1","2.4.44+dfsg-5+deb9u2","2.4.44+dfsg-5+deb9u3","2.4.44+dfsg-5+deb9u4","2.4.44+dfsg-5+deb9u5","2.4.44+dfsg-5+deb9u6","2.4.44+dfsg-5+deb9u7","2.4.44+dfsg-5+deb9u8"]},{"source":"osv","ecosystem":"Debian:10","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.47+dfsg-3+deb10u7"}]}],"versions":["2.4.47+dfsg-3","2.4.47+dfsg-3+deb10u1","2.4.47+dfsg-3+deb10u1~bpo9+1","2.4.47+dfsg-3+deb10u2","2.4.47+dfsg-3+deb10u2~bpo9+1","2.4.47+dfsg-3+deb10u3","2.4.47+dfsg-3+deb10u4","2.4.47+dfsg-3+deb10u5","2.4.47+dfsg-3+deb10u6"]},{"source":"osv","ecosystem":"Debian:11","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57+dfsg-3+deb11u1"}]}],"versions":["2.4.57+dfsg-3","2.4.57+dfsg-3+deb11u1~bpo10+1"]},{"source":"osv","ecosystem":"Julia","package":"OpenLDAPClient_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.5.14+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57-1.2.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-7.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-7.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-3.oe2203"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP3","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.8.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.8.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.89.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.89.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.89.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.89.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.89.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.89.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.89.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 12","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-42.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-42.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-42.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-42.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-22.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-22.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-22.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-22.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-22.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-22.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-22.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150000.9.71.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150000.9.71.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150000.9.71.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150000.9.71.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150000.9.71.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150000.9.71.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150000.9.71.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150000.9.71.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150000.9.71.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150000.9.71.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.31-1+nmu2ubuntu8.5+esm5"}]}],"versions":["2.4.31-1+nmu2ubuntu3","2.4.31-1+nmu2ubuntu4","2.4.31-1+nmu2ubuntu5","2.4.31-1+nmu2ubuntu8","2.4.31-1+nmu2ubuntu8.1","2.4.31-1+nmu2ubuntu8.2","2.4.31-1+nmu2ubuntu8.3","2.4.31-1+nmu2ubuntu8.4","2.4.31-1+nmu2ubuntu8.5","2.4.31-1+nmu2ubuntu8.5+esm1","2.4.31-1+nmu2ubuntu8.5+esm2","2.4.31-1+nmu2ubuntu8.5+esm3","2.4.31-1+nmu2ubuntu8.5+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.42+dfsg-2ubuntu3.13+esm1"}]}],"versions":["2.4.41+dfsg-1ubuntu2","2.4.41+dfsg-1ubuntu3","2.4.42+dfsg-2ubuntu1","2.4.42+dfsg-2ubuntu3","2.4.42+dfsg-2ubuntu3.1","2.4.42+dfsg-2ubuntu3.2","2.4.42+dfsg-2ubuntu3.3","2.4.42+dfsg-2ubuntu3.4","2.4.42+dfsg-2ubuntu3.5","2.4.42+dfsg-2ubuntu3.6","2.4.42+dfsg-2ubuntu3.7","2.4.42+dfsg-2ubuntu3.8","2.4.42+dfsg-2ubuntu3.9","2.4.42+dfsg-2ubuntu3.10","2.4.42+dfsg-2ubuntu3.11","2.4.42+dfsg-2ubuntu3.12","2.4.42+dfsg-2ubuntu3.13"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.45+dfsg-1ubuntu1.11"}]}],"versions":["2.4.45+dfsg-1ubuntu1","2.4.45+dfsg-1ubuntu1.1","2.4.45+dfsg-1ubuntu1.2","2.4.45+dfsg-1ubuntu1.3","2.4.45+dfsg-1ubuntu1.4","2.4.45+dfsg-1ubuntu1.5","2.4.45+dfsg-1ubuntu1.6","2.4.45+dfsg-1ubuntu1.7","2.4.45+dfsg-1ubuntu1.8","2.4.45+dfsg-1ubuntu1.9","2.4.45+dfsg-1ubuntu1.10"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49+dfsg-2ubuntu1.9"}]}],"versions":["2.4.48+dfsg-1ubuntu1","2.4.48+dfsg-1ubuntu2","2.4.48+dfsg-1ubuntu3","2.4.48+dfsg-1ubuntu4","2.4.49+dfsg-1ubuntu1","2.4.49+dfsg-2ubuntu1","2.4.49+dfsg-2ubuntu1.2","2.4.49+dfsg-2ubuntu1.3","2.4.49+dfsg-2ubuntu1.4","2.4.49+dfsg-2ubuntu1.5","2.4.49+dfsg-2ubuntu1.6","2.4.49+dfsg-2ubuntu1.7","2.4.49+dfsg-2ubuntu1.8"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.11+dfsg-1~exp1ubuntu3.1"}]}],"versions":["2.5.6+dfsg-1~exp1ubuntu1","2.5.11+dfsg-1~exp1ubuntu1","2.5.11+dfsg-1~exp1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.45+dfsg-1ubuntu1.11"}]}],"versions":["2.4.45+dfsg-1ubuntu1","2.4.45+dfsg-1ubuntu1.1","2.4.45+dfsg-1ubuntu1.2","2.4.45+dfsg-1ubuntu1.3","2.4.45+dfsg-1ubuntu1.4","2.4.45+dfsg-1ubuntu1.5","2.4.45+dfsg-1ubuntu1.6","2.4.45+dfsg-1ubuntu1.7","2.4.45+dfsg-1ubuntu1.8","2.4.45+dfsg-1ubuntu1.9","2.4.45+dfsg-1ubuntu1.10"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49+dfsg-2ubuntu1.9"}]}],"versions":["2.4.48+dfsg-1ubuntu1","2.4.48+dfsg-1ubuntu2","2.4.48+dfsg-1ubuntu3","2.4.48+dfsg-1ubuntu4","2.4.49+dfsg-1ubuntu1","2.4.49+dfsg-2ubuntu1","2.4.49+dfsg-2ubuntu1.2","2.4.49+dfsg-2ubuntu1.3","2.4.49+dfsg-2ubuntu1.4","2.4.49+dfsg-2ubuntu1.5","2.4.49+dfsg-2ubuntu1.6","2.4.49+dfsg-2ubuntu1.7","2.4.49+dfsg-2ubuntu1.8"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.11+dfsg-1~exp1ubuntu3.1"}]}],"versions":["2.5.6+dfsg-1~exp1ubuntu1","2.5.11+dfsg-1~exp1ubuntu1","2.5.11+dfsg-1~exp1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.31-1+nmu2ubuntu8.5+esm5"}]}],"versions":["2.4.31-1+nmu2ubuntu3","2.4.31-1+nmu2ubuntu4","2.4.31-1+nmu2ubuntu5","2.4.31-1+nmu2ubuntu8","2.4.31-1+nmu2ubuntu8.1","2.4.31-1+nmu2ubuntu8.2","2.4.31-1+nmu2ubuntu8.3","2.4.31-1+nmu2ubuntu8.4","2.4.31-1+nmu2ubuntu8.5","2.4.31-1+nmu2ubuntu8.5+esm1","2.4.31-1+nmu2ubuntu8.5+esm2","2.4.31-1+nmu2ubuntu8.5+esm3","2.4.31-1+nmu2ubuntu8.5+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.42+dfsg-2ubuntu3.13+esm1"}]}],"versions":["2.4.41+dfsg-1ubuntu2","2.4.41+dfsg-1ubuntu3","2.4.42+dfsg-2ubuntu1","2.4.42+dfsg-2ubuntu3","2.4.42+dfsg-2ubuntu3.1","2.4.42+dfsg-2ubuntu3.2","2.4.42+dfsg-2ubuntu3.3","2.4.42+dfsg-2ubuntu3.4","2.4.42+dfsg-2ubuntu3.5","2.4.42+dfsg-2ubuntu3.6","2.4.42+dfsg-2ubuntu3.7","2.4.42+dfsg-2ubuntu3.8","2.4.42+dfsg-2ubuntu3.9","2.4.42+dfsg-2ubuntu3.10","2.4.42+dfsg-2ubuntu3.11","2.4.42+dfsg-2ubuntu3.12","2.4.42+dfsg-2ubuntu3.13"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"netapp","product":"h300s_firmware"},{"vendor":"netapp","product":"h410c_firmware"},{"vendor":"netapp","product":"h410s_firmware"},{"vendor":"netapp","product":"h500s_firmware"},{"vendor":"netapp","product":"h700e_firmware"},{"vendor":"netapp","product":"h700s_firmware"},{"vendor":"openldap","product":"openldap"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://bugs.openldap.org/show_bug.cgi?id=9815","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Vendor Advisory","advisory","web"]},{"url":"https://www.debian.org/security/2022/dsa-5140","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/05/msg00032.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","article","web"]},{"url":"https://security.netapp.com/advisory/ntap-20220609-0007/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29155","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20220609-0007"},{"url":"https://github.com/advisories/GHSA-9rm2-9q89-9524"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-29155","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-29155","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1652986454","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2022-1652986513.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2022-1652987203.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos7-els/CLSA-2023-1695834945.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1777031791.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1777051819.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29155.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-29155","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0205.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30439","tags":["report"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2022-May/011028.html","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CWSTVPRK33YGMF7RXMFQT7ZGRDJ7P6Y5/","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-5424-1","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1654","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221670-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1199240","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29155","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221671-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1198383","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221685-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221771-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221832-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1191157","tags":["report"]},{"url":"https://bugzilla.suse.com/1197004","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-29155","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5424-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-29155","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-29155","description":"In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.","status":"published","published":"2022-05-04T19:06:09Z","modified":"2026-10-14T16:29:16.639Z","updated_at":"2026-11-02T14:34:36.578327Z"}],"euvd":[{"id":"EUVD-2022-33563","description":"In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.","status":"published","published":"2022-05-04T19:06:09Z","modified":"2026-10-14T16:29:16Z","updated_at":"2026-11-02T17:27:14.304159Z"}],"ghsa":[{"id":"GHSA-9rm2-9q89-9524","title":"In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the...","description":"In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.","status":"published","published":"2022-05-05T00:00:14Z","modified":"2026-10-14T18:32:30Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:13:27.339015Z"}],"nvd":[{"id":"CVE-2022-29155","description":"In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.","status":"published","published":"2022-05-04T20:15:07.69Z","modified":"2026-10-14T17:17:38.26Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:07:18.660414Z"}],"osv":[{"id":"ALPINE-CVE-2022-29155","description":"In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.","status":"published","published":"2022-05-04T20:15:07.69Z","modified":"2026-11-03T07:18:33.153350302Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"AZL-9672","title":"CVE-2022-29155 affecting package openldap for versions less than 2.4.57-7","description":"In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.","status":"published","published":"2022-05-04T20:15:07Z","modified":"2026-04-21T04:35:06.652851Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:12.313414Z"},{"id":"BELL-CVE-2022-29155","title":"CVE-2022-29155 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:06.445204Z","modified":"2026-03-05T07:15:27.822055Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"DEBIAN-CVE-2022-29155","description":"In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.","status":"published","published":"2022-05-04T20:15:07.69Z","modified":"2026-11-03T08:03:51.996804736Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T08:23:57.167851Z"},{"id":"JLSEC-2026-174","description":"In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.","status":"published","published":"2026-04-21T00:04:14.628Z","modified":"2026-07-18T00:00:26.891132078Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:47:18.159338Z"},{"id":"OESA-2022-1654","title":"openldap security update","description":"OpenLDAP is an open source suite of LDAP (Lightweight Directory Access Protocol) applications and development tools. LDAP is a set of protocols for accessing directory services (usually phone book style information, but other information is possible) over the Internet, similar to the way DNS (Domain Name System) information is propagated over the Internet. The openldap package contains configuration files, libraries, and documentation for OpenLDAP.\r\n\r\nSecurity Fix(es):\r\n\r\nIn OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.(CVE-2022-29155)","status":"published","published":"2022-05-18T11:04:55Z","modified":"2026-08-18T01:16:30.84152898Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"UBUNTU-CVE-2022-29155","description":"In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.","status":"published","published":"2022-05-04T20:15:00Z","modified":"2026-04-22T13:21:50.280111Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:53:53.899276Z"},{"id":"BIT-openldap-2022-29155","description":"In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.","status":"published","published":"2024-03-06T10:59:57.21Z","modified":"2026-09-08T08:48:16.652816216Z","updated_at":"2026-11-02T15:28:34.343258Z"},{"id":"CLSA-2022-1652986454","title":"Fix CVE(s): CVE-2022-29155","description":"\n   * SECURITY UPDATE: SQL injection vulnerability\n     - debian/patches/CVE-2022-29155.patch: Escape filter values\n       in servers/slapd/back-sql/search.c.\n     - CVE-2022-29155","status":"published","published":"2022-05-19T18:54:14Z","modified":"2026-06-04T10:04:27.274006Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1652986513","title":"Fixed CVE-2022-29155 in openldap","description":"- CVE-2022-29155: fix SQL injection vulnerability caused by LDAP search operation","status":"published","published":"2022-05-19T18:55:13Z","modified":"2026-06-01T00:33:24.573191742Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1652987203","title":"Fixed CVE-2022-29155 in openldap","description":"- CVE-2022-29155: fix SQL injection vulnerability caused by LDAP search operation","status":"published","published":"2022-05-19T19:06:43Z","modified":"2026-06-01T00:31:48.451050734Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2023-1695834945","title":"openldap: Fix of 2 CVEs","description":"- CVE-2022-29155: fix a SQL injection vulnerability in the back-sql backend\n  to slapd\n- CVE-2021-27212: fix denial of service (daemon exit) via a short timestamp\n  if slapd is used","status":"published","published":"2023-09-27T17:15:49Z","modified":"2026-10-21T10:47:53.042902902Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2026-1777031791","title":"openldap: Fix of 2 CVEs","description":"- CVE-2022-29155: fix a SQL injection vulnerability in the back-sql backend\n  to slapd\n- CVE-2021-27212: fix denial of service (daemon exit) via a short timestamp\n  if slapd is used","status":"published","published":"2026-04-24T11:56:36Z","modified":"2026-10-21T10:48:02.826376223Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1777051819","title":"openldap: Fix of 2 CVEs","description":"- CVE-2022-29155: fix a SQL injection vulnerability in the back-sql backend\n  to slapd\n- CVE-2021-27212: fix denial of service (daemon exit) via a short timestamp\n  if slapd is used","status":"published","published":"2026-04-25T11:28:41Z","modified":"2026-10-21T10:48:14.169011778Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CVE-2022-29155","description":"In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.","status":"published","published":"2022-05-04T19:06:09Z","modified":"2026-11-02T02:45:55.220840068Z","updated_at":"2026-11-02T15:44:25.164673Z"},{"id":"DLA-3017-1","title":"openldap - security update","status":"published","published":"2022-05-20T00:00:00Z","modified":"2026-03-09T01:21:19.861629Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5140-1","title":"openldap - security update","status":"published","published":"2022-05-19T00:00:00Z","modified":"2026-03-09T02:09:42.891555Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2022-0205","title":"Updated openldap packages fix security vulnerability","description":"SQL injection in back-sql (CVE-2022-29155)\n","status":"published","published":"2022-05-25T18:46:18Z","modified":"2026-04-16T04:43:41.651622646Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"SUSE-SU-2022:1670-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\n- CVE-2022-29155: Fixed SQL injection in back-sql (bsc#1199240).\n","status":"published","published":"2022-05-16T08:07:35Z","modified":"2026-02-04T04:22:25.222838Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1671-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\n- CVE-2022-29155: Fixed SQL injection in back-sql (bsc#1199240).\n- Fixed issue with SASL init that crashed slapd at startup under certain conditions (bsc#1198383).\n","status":"published","published":"2022-05-16T08:09:13Z","modified":"2026-02-04T03:30:36.556211Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1685-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\n- CVE-2022-29155: Fixed SQL injection in back-sql (bsc#1199240).\n","status":"published","published":"2022-05-16T11:55:09Z","modified":"2026-02-04T03:56:04.161396Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1771-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\n- CVE-2022-29155: Fixed SQL injection in back-sql (bsc#1199240).\n- Fixed issue with SASL init that crashed slapd at startup under certain conditions (bsc#1198383).\n","status":"published","published":"2022-05-20T13:01:37Z","modified":"2026-02-04T03:27:41.655189Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1832-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\nSecurity:\n- CVE-2022-29155: Fixed SQL injection in back-sql (bsc#1199240).\n\nBugfixes:\n- allow specification of max/min TLS version with TLS1.3 (bsc#1191157)\n- libldap was able to be out of step with openldap in some cases which could cause incorrect installations and symbol\n  resolution failures. openldap2 and libldap now are locked to their related release versions. (bsc#1197004)\n- restore CLDAP functionality in CLI tools (jsc#PM-3288)\n","status":"published","published":"2022-05-24T09:52:57Z","modified":"2026-02-04T02:32:55.388131Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"USN-5424-1","title":"openldap vulnerability","description":"It was discovered that OpenLDAP incorrectly handled certain SQL statements\nwithin LDAP queries in the experimental back-sql backend. A remote attacker\ncould possibly use this issue to perform an SQL injection attack and alter\nthe database.\n","status":"published","published":"2022-05-17T11:47:37Z","modified":"2026-04-22T10:24:03.231329Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-5424-2","title":"openldap vulnerability","description":"USN-5424-1 fixed a vulnerability in OpenLDAP. This update provides\nthe corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that OpenLDAP incorrectly handled certain SQL statements\n within LDAP queries in the experimental back-sql backend. A remote attacker\n could possibly use this issue to perform an SQL injection attack and alter\n the database.\n","status":"published","published":"2022-05-19T14:39:17Z","modified":"2026-06-29T13:49:38.1482486Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}