CVSS: 9.8EPSS: 0%CPEs: 17EXPL: 1CVE-2022-29155 – Ubuntu Security Notice USN-5424-2
https://notcve.org/view.php?id=CVE-2022-29155
04 May 2022 — In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping. En OpenLDAP versiones 2.x anteriores a 2.5.12 y versiones 2.6.x anteriores a 2.6.2, se presenta una vulnerabilidad de inyección SQL en el backend experimental back-sql de slapd, por medio de una sentencia SQL dentr... • https://bugs.openldap.org/show_bug.cgi?id=9815 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.5EPSS: 3%CPEs: 5EXPL: 1CVE-2021-27212 – Ubuntu Security Notice USN-4744-1
https://notcve.org/view.php?id=CVE-2021-27212
14 Feb 2021 — In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime. En OpenLDAP versiones hasta 2.4.57 y versiones 2.5.x hasta 2.5.1alpha, puede ocurrir un fallo de aserción en slapd en la función issuerAndThisUpdateCheck por medio de un paquete diseñado, resultando en una denegación de servicio (sali... • https://bugs.openldap.org/show_bug.cgi?id=9454 • CWE-617: Reachable Assertion •
CVSS: 7.5EPSS: 3%CPEs: 22EXPL: 0CVE-2020-36221 – Apple Security Advisory 2021-05-25-4
https://notcve.org/view.php?id=CVE-2020-36221
25 Jan 2021 — An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck). Se detectó un subdesbordamiento de enteros en OpenLDAP versiones anteriores a 2.4.57, conllevando bloqueos de slapd en el procesamiento de Certificate Exact Assertion, resultando en una denegación de servicio (serialNumberAndIssuerCheck de schema_init.c) It was discovered that OpenLDAP incorrectly hand... • http://seclists.org/fulldisclosure/2021/May/64 • CWE-191: Integer Underflow (Wrap or Wraparound) •
CVSS: 7.5EPSS: 4%CPEs: 22EXPL: 0CVE-2020-36222 – Apple Security Advisory 2021-05-25-4
https://notcve.org/view.php?id=CVE-2020-36222
25 Jan 2021 — A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service. Se detectó un fallo en OpenLDAP versiones anteriores a 2.4.57, conllevando a un fallo de aserción en slapd en la comprobación de saslAuthzTo, resultando en una denegación de servicio Several vulnerabilities were discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. An unauthenticated remote attacker can take advantage of... • http://seclists.org/fulldisclosure/2021/May/64 • CWE-617: Reachable Assertion •
CVSS: 7.5EPSS: 1%CPEs: 22EXPL: 0CVE-2020-36224 – Apple Security Advisory 2021-05-25-4
https://notcve.org/view.php?id=CVE-2020-36224
25 Jan 2021 — A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service. Se detectó un fallo en OpenLDAP versiones anteriores a 2.4.57, conllevando a la liberación de un puntero no válido y un bloqueo de slapd en el procesamiento saslAuthzTo, resultando en una denegación de servicio Several vulnerabilities were discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. An unauthenticated... • http://seclists.org/fulldisclosure/2021/May/64 • CWE-763: Release of Invalid Pointer or Reference •
CVSS: 7.5EPSS: 1%CPEs: 4EXPL: 0CVE-2020-36225 – Apple Security Advisory 2021-05-25-4
https://notcve.org/view.php?id=CVE-2020-36225
25 Jan 2021 — A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service. Se detectó un fallo en OpenLDAP versiones anteriores a 2.4.57, conllevando a una doble liberación y un bloqueo de slapd en el procesamiento de saslAuthzTo, resultando en una denegación de servicio It was discovered that OpenLDAP incorrectly handled Certificate Exact Assertion processing. A remote attacker could possibly use this issue to cause OpenLDAP to cr... • http://seclists.org/fulldisclosure/2021/May/64 • CWE-415: Double Free •
CVSS: 7.5EPSS: 0%CPEs: 22EXPL: 0CVE-2020-36226 – Apple Security Advisory 2021-05-25-4
https://notcve.org/view.php?id=CVE-2020-36226
25 Jan 2021 — A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service. Se detectó un fallo en OpenLDAP versiones anteriores a 2.4.57, conllevando un cálculo inapropiado de memch-)bv_len y un bloqueo de slapd en el procesamiento de saslAuthzTo, resultando en una denegación de servicio Several vulnerabilities were discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. An unaut... • http://seclists.org/fulldisclosure/2021/May/64 •
CVSS: 7.5EPSS: 10%CPEs: 4EXPL: 0CVE-2020-36228 – Apple Security Advisory 2021-05-25-4
https://notcve.org/view.php?id=CVE-2020-36228
25 Jan 2021 — An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service. Se detectó un subdesbordamiento de enteros en OpenLDAP versiones anteriores a 2.4.57, conllevando un bloqueo de slapd en el procesamiento de Certificate List Exact Assertion, resultando en una denegación de servicio It was discovered that OpenLDAP incorrectly handled Certificate Exact Assertion processing. A remote attacker could possibly ... • http://seclists.org/fulldisclosure/2021/May/64 • CWE-191: Integer Underflow (Wrap or Wraparound) •
CVSS: 7.5EPSS: 6%CPEs: 22EXPL: 0CVE-2020-36229 – Apple Security Advisory 2021-05-25-4
https://notcve.org/view.php?id=CVE-2020-36229
25 Jan 2021 — A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in ad_keystring, resulting in denial of service. Se detectó un fallo en ldap_X509dn2bv en OpenLDAP versiones anteriores a 2.4.57, conllevando un bloqueo de slapd en el análisis del DN X.509 en ad_keystring, resultando en una denegación de servicio It was discovered that OpenLDAP incorrectly handled Certificate Exact Assertion processing. A remote attacker could possibly use this issue to cause ... • http://seclists.org/fulldisclosure/2021/May/64 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVSS: 7.5EPSS: 2%CPEs: 23EXPL: 0CVE-2020-36230 – Apple Security Advisory 2021-05-25-4
https://notcve.org/view.php?id=CVE-2020-36230
25 Jan 2021 — A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service. Se detectó un fallo en OpenLDAP versiones anteriores a 2.4.57, conllevando en un fallo de aserción en slapd en el análisis de DN X.509 en ber_next_element del archivo decode.c, resultando en una denegación de servicio Several vulnerabilities were discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol... • http://seclists.org/fulldisclosure/2021/May/64 • CWE-617: Reachable Assertion •