Openldap vulnerabilities

Products

• Openldap 59

Newest

• openldap, apple macos, netapp active iq unified manager +11 more +13 more A vulnerability was found in openldap. This security flaw causes a null pointer dereference in... CVE-2023-2953 Fix available 7.5 HighMay 30, 2023
• openldap, debian linux, netapp h300s firmware +8 more +10 more In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the... CVE-2022-29155 Fix available EPSS 64.5% 9.8 CriticalMay 4, 2022
• openldap, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur... CVE-2021-27212 Fix available EPSS 66.1% 7.5 HighFebruary 14, 2021
• openldap, apple mac os x, macos +4 more +6 more An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the... CVE-2020-36221 Fix available EPSS 85.0% 7.5 HighJanuary 25, 2021
• openldap, apple mac os x, macos +4 more +6 more A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the... CVE-2020-36222 Fix available EPSS 77.2% 7.5 HighJanuary 25, 2021
• openldap, apple mac os x, macos +4 more +6 more A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd... CVE-2020-36224 Fix available 7.5 HighJanuary 25, 2021
• openldap, apple macos, debian linux +3 more +5 more A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the... CVE-2020-36225 Fix available 7.5 HighJanuary 25, 2021
• openldap, apple mac os x, macos +4 more +6 more A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and... CVE-2020-36226 Fix available 7.5 HighJanuary 25, 2021
• openldap, apple macos, debian linux +3 more +5 more An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the... CVE-2020-36228 Fix available EPSS 85.0% 7.5 HighJanuary 25, 2021
• openldap, apple mac os x, macos +4 more +6 more A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the... CVE-2020-36229 Fix available 7.5 HighJanuary 25, 2021
• openldap, apache bookkeeper, apple mac os x +5 more +7 more A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X... CVE-2020-36230 Fix available EPSS 12.1% 7.5 HighJanuary 25, 2021
• openldap, apple macos, debian linux +3 more +5 more A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the... CVE-2020-36227 Fix available EPSS 77.2% 7.5 HighJanuary 25, 2021
• openldap, apple mac os x, macos +4 more +6 more A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return... CVE-2020-36223 Fix available 7.5 HighJanuary 25, 2021
• openldap, debian linux, fedoraproject fedora +7 more +9 more A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a... CVE-2020-25710 Fix available 7.5 HighNovember 13, 2020
• openldap, apple mac os x, macos +5 more +7 more A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be... CVE-2020-25709 Fix available 7.5 HighNovember 13, 2020
• openldap, netapp cloud backup, solidfire baseboard management controller firmware +4 more +6 more A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during... CVE-2020-25692 Fix available 7.5 HighOctober 30, 2020
• openldap, redhat enterprise linux, mcafee policy auditor +2 more +4 more libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third... CVE-2020-15719 Fix available 4.2 MediumJuly 14, 2020
• openldap, apple mac os x, broadcom brocade fabric operating system +18 more +20 more In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean... CVE-2020-12243 Fix available 7.5 HighApril 28, 2020
• openldap, debian linux +1 more An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV... CVE-2014-8182 Fix available 7.5 HighJanuary 2, 2020
• openldap, apple mac os x, canonical ubuntu linux +9 more +11 more An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session... CVE-2019-13565 Fix available 7.5 HighJuly 26, 2019
• openldap, apple mac os x, canonical ubuntu linux +9 more +11 more An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator... CVE-2019-13057 Fix available 4.9 MediumJuly 26, 2019
• openldap, mcafee policy auditor, opensuse leap +1 more +3 more contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the... CVE-2017-17740 Fix available 7.5 HighDecember 18, 2017
• openldap, oracle blockchain platform +1 more slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root... CVE-2017-14159 Fix available 4.7 MediumSeptember 5, 2017
• openldap openldap-servers /usr/libexec/openldap/generate-server-cert.sh in openldap-servers sets weak permissions for the... CVE-2016-4984 4.7 MediumJuly 14, 2017
• openldap, debian linux, mcafee policy auditor +7 more +9 more servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free... CVE-2017-9287 Fix available 6.5 MediumMay 29, 2017
• openldap, oracle linux, redhat enterprise linux desktop +6 more +8 more The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse... CVE-2015-3276 Fix available 7.5 HighDecember 7, 2015
• openldap, apple mac os x +1 more The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote... CVE-2015-6908 Public exploitFix available EPSS 18.8% 5.0 MediumSeptember 11, 2015
• openldap, debian linux +1 more The default slapd configuration in the Debian openldap package 2.4.23-3 through 2.4.39-1.1 allows... CVE-2014-9713 Fix available 4.0 MediumMarch 30, 2015
• openldap, apple mac os x, opensuse +2 more Double free vulnerability in the get_vrFilter function in servers/slapd/filter.c in OpenLDAP 2.4... CVE-2015-1546 Fix available 5.0 MediumFebruary 12, 2015
• openldap The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40... CVE-2015-1545 Fix available EPSS 11.1% 5.0 MediumFebruary 12, 2015
• openldap, debian linux +1 more The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which... CVE-2013-4449 Fix available EPSS 10.9% 4.3 MediumFebruary 5, 2014
• openldap slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion... CVE-2012-1164 Fix available 2.6 LowJune 29, 2012
• openldap libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS... CVE-2012-2668 Fix available 4.3 MediumJune 17, 2012
• openldap Off-by-one error in the UTF8StringNormalize function in OpenLDAP 2.4.26 and earlier allows remote... CVE-2011-4079 Fix available 4.0 MediumOctober 27, 2011
• openldap modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of... CVE-2011-1081 Public exploitFix available EPSS 14.5% 5.0 MediumMarch 20, 2011
• openldap bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root... CVE-2011-1025 Fix available 6.8 MediumMarch 20, 2011
• openldap chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a... CVE-2011-1024 Fix available 4.6 MediumMarch 20, 2011
• openldap OpenLDAP 2.4.22 allows remote attackers to cause a denial of service (crash) via a modrdn call... CVE-2010-0212 Fix available 5.0 MediumJuly 27, 2010
• openldap, apple mac os x, mac os x server +2 more +4 more The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a... CVE-2010-0211 Public exploitFix available EPSS 28.5% 9.8 CriticalJuly 27, 2010
• openldap, apple mac os x, fedoraproject fedora +2 more libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is... CVE-2009-3767 Fix available 4.3 MediumOctober 23, 2009
• openldap liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service ... CVE-2008-2952 Public exploitFix available EPSS 13.2% 5.0 MediumJuly 1, 2008
• openldap slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote... CVE-2008-0658 4.0 MediumFebruary 13, 2008
• openldap The BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a... CVE-2007-6698 4.0 MediumFebruary 1, 2008
• openldap slapo-pcache (overlays/pcache.c) in slapd in OpenLDAP before 2.3.39, when running as a proxy... CVE-2007-5708 Fix available 7.1 HighOctober 30, 2007
• openldap OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service (slapd crash) via an... CVE-2007-5707 Fix available 7.1 HighOctober 30, 2007
• openldap Buffer overflow in the krbv4_ldap_auth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and... CVE-2006-6493 Public exploit 5.1 MediumDecember 13, 2006
• openldap, canonical ubuntu linux +1 more OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via... CVE-2006-5779 EPSS 76.9% 7.5 HighNovember 7, 2006
• openldap slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control... CVE-2006-4600 Fix available 2.3 LowSeptember 7, 2006
• openldap Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to... CVE-2006-2754 5.0 MediumJune 1, 2006
• openldap Untrusted search path vulnerability in OpenLDAP before 2.2.28-r3 on Gentoo Linux allows local... CVE-2005-4442 7.2 HighDecember 21, 2005
• Show olderLoading…