OP
Product
Openldap
59
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 21Medium 4Low 0
Watch
Add Openldap to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-29155 | 9.8 | May 4 | In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query Affected: 2.0 before 2.5.12; 2.6.0 before 2.6.2 |
| CVE-2010-0211 | 9.8 | Jul 28 | The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a… Affected: 2.4.22 |
| CVE-2023-2953 | 7.5 | May 30 | A vulnerability was found in openldap Affected: 2.4 |
| CVE-2020-25710 | 7.5 | May 28 | A flaw was found in OpenLDAP in versions before 2.4.56 Affected: before 2.4.56 |
| CVE-2020-25709 | 7.5 | May 18 | A flaw was found in OpenLDAP Affected: before 2.4.56 |
| CVE-2021-27212 | 7.5 | Feb 14 | In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a… Affected: through 2.4.57; 2.5.0; 2.5.1 |
| CVE-2020-36221 | 7.5 | Jan 25 | An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c… Affected: before 2.4.57 |
| CVE-2020-36222 | 7.5 | Jan 25 | A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service Affected: before 2.4.57 |
| CVE-2020-36224 | 7.5 | Jan 25 | A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service Affected: before 2.4.57 |
| CVE-2020-36225 | 7.5 | Jan 25 | A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service Affected: before 2.4.57 |
| CVE-2020-36226 | 7.5 | Jan 25 | A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service Affected: before 2.4.57 |
| CVE-2020-36228 | 7.5 | Jan 25 | An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service Affected: before 2.4.57 |
| CVE-2020-36229 | 7.5 | Jan 25 | A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in ad_keystring, resulting in denial of service Affected: before 2.4.57 |
| CVE-2020-36230 | 7.5 | Jan 25 | A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service Affected: before 2.4.57 |
| CVE-2020-36227 | 7.5 | Jan 25 | A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service Affected: before 2.4.57 |
| CVE-2020-36223 | 7.5 | Jan 25 | A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and… Affected: before 2.4.57 |
| CVE-2020-25692 | 7.5 | Dec 8 | A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs Affected: before 2.4.55 |
| CVE-2020-12243 | 7.5 | Apr 28 | In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash) Affected: before 2.4.50 |
| CVE-2014-8182 | 7.5 | Jan 2 | An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages Affected: 2.4 |
| CVE-2019-13565 | 7.5 | Jul 26 | An issue was discovered in OpenLDAP 2.x before 2.4.48 Affected: 2.0 through 2.4.47 |
| CVE-2017-17740 | 7.5 | Dec 18 | contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the… Affected: through 2.4.45 |
| CVE-2015-3276 | 7.5 | Dec 7 | The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than… Affected: before 2.5 |
| CVE-2006-5779 | 7.5 | Nov 7 | OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via LDAP BIND requests with long authcid names, which triggers an assertion failure Affected: before 2.3.29 |
| CVE-2017-9287 | 6.5 | May 29 | servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability Affected: through 2.4.44 |
| CVE-2019-13057 | 4.9 | Jul 26 | An issue was discovered in the server in OpenLDAP before 2.4.48 Affected: before 2.4.48 |
| CVE-2017-14159 | 4.7 | Sep 5 | slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging… Affected: through 2.4.45 |
| CVE-2020-15719 | 4.2 | Jul 14 | libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support Affected: before 2.4.46-10.el8 |
| CVE-2015-6908 | – | Sep 11 | The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable assertion and application crash)… Affected: through 2.4.42 |
| CVE-2014-9713 | – | Apr 1 | The default slapd configuration in the Debian openldap package 2.4.23-3 through 2.4.39-1.1 allows remote authenticated users to modify the user's permissions and other user… Affected: 2.4.23; 2.4.24; 2.4.25; 2.4.26; 2.4.27; 2.4.28; +11 more |
| CVE-2015-1546 | – | Feb 12 | Double free vulnerability in the get_vrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of service (crash) via a crafted… Affected: 2.4.40 |
| CVE-2015-1545 | – | Feb 12 | The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service (NULL pointer dereference and… Affected: 2.4.13; 2.4.14; 2.4.15; 2.4.16; 2.4.17; 2.4.18; +22 more |
| CVE-2013-4449 | – | Feb 5 | The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service (slapd crash) by unbinding… Affected: through 2.4.36; 2.4.6; 2.4.7; 2.4.8; 2.4.9; 2.4.10; +25 more |
| CVE-2012-1164 | – | Jun 29 | slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which… Affected: through 2.4.29; 2.4.6; 2.4.7; 2.4.8; 2.4.9; 2.4.10; +18 more |
| CVE-2012-2668 | – | Jun 17 | libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS backend, always uses the default cipher suite even when TLSCipherSuite is set, which… Affected: through 2.4.31; 2.4.6; 2.4.7; 2.4.8; 2.4.9; 2.4.10; +20 more |
| CVE-2011-4079 | – | Oct 27 | Off-by-one error in the UTF8StringNormalize function in OpenLDAP 2.4.26 and earlier allows remote attackers to cause a denial of service (slapd crash) via a zero-length string… Affected: through 2.4.26; 1.0; 1.0.1; 1.0.2; 1.0.3; 1.1; +34 more |
| CVE-2011-1081 | – | Mar 20 | modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service (daemon crash) via a relative Distinguished Name (DN) modification request… Affected: 2.4.6; 2.4.7; 2.4.8; 2.4.9; 2.4.10; 2.4.11; +12 more |
| CVE-2011-1025 | – | Mar 20 | bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name (DN), which allows remote attackers to bypass intended access… Affected: 2.4.6; 2.4.7; 2.4.8; 2.4.9; 2.4.10; 2.4.11; +12 more |
| CVE-2011-1024 | – | Mar 20 | chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicy_forward_updates (aka authentication-failure forwarding) is… Affected: 2.4.6; 2.4.7; 2.4.8; 2.4.9; 2.4.10; 2.4.11; +12 more |
| CVE-2010-0212 | – | Jul 28 | OpenLDAP 2.4.22 allows remote attackers to cause a denial of service (crash) via a modrdn call with a zero-length RDN destination string, which is not properly handled by the… Affected: 2.4.22 |
| CVE-2009-3767 | – | Oct 23 | libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's… Affected: before 2.4.18 |
| CVE-2008-2952 | – | Jul 1 | liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via crafted ASN.1 BER datagrams that trigger an assertion error Affected: 2.2.4; 2.2.5; 2.2.6; 2.2.7; 2.2.8; 2.2.9; +34 more |
| CVE-2008-0658 | – | Feb 13 | slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a… Affected: 2.3.39 |
| CVE-2007-6698 | – | Feb 1 | The BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a denial of service (crash) via a potentially-successful modify operation with the… Affected: through 2.3.35 |
| CVE-2007-5708 | – | Oct 30 | slapo-pcache (overlays/pcache.c) in slapd in OpenLDAP before 2.3.39, when running as a proxy-caching server, allocates memory using a malloc variant instead of calloc, which… Affected: 1.0; 1.0.1; 1.0.2; 1.0.3; 1.1; 1.1.0; +34 more |
| CVE-2007-5707 | – | Oct 30 | OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service (slapd crash) via an LDAP request with a malformed objectClasses attribute Affected: 1.0; 1.0.1; 1.0.2; 1.0.3; 1.1; 1.1.0; +34 more |
| CVE-2006-6493 | – | Dec 13 | Buffer overflow in the krbv4_ldap_auth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and earlier, when OpenLDAP is compiled with the --enable-kbind (Kerberos KBIND)… Affected: through 2.4.3; 1.0; 1.0.1; 1.0.2; 1.0.3; 1.1; +34 more |
| CVE-2006-4600 | – | Sep 7 | slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges to modify arbitrary Distinguished Names (DN) Affected: 2.0.20; 2.0.21; 2.0.22; 2.0.23; 2.0.24 |
| CVE-2006-2754 | – | Jun 1 | Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary code via a long hostname Affected: 2.2.1; 2.2.11; 2.2.12; 2.2.13; 2.2.14; 2.2.15; +6 more |
| CVE-2005-4442 | – | Dec 21 | Untrusted search path vulnerability in OpenLDAP before 2.2.28-r3 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the… Affected: through 2.2.28_r2; 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; +34 more |
| CVE-2004-1880 | – | Dec 31 | Memory leak in the back-bdb backend for OpenLDAP 2.1.12 and earlier allows remote attackers to cause a denial of service (memory consumption) Affected: 1.0; 1.0.1; 1.0.2; 1.0.3; 1.1.0; 1.1.1; +34 more |