OP
Product
Openldap
59
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 21Medium 4Low 0
Watch
Add Openldap to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-2953 | 7.5 | May 30 | A vulnerability was found in openldap Affected: 2.4 |
| CVE-2020-25710 | 7.5 | May 28 | A flaw was found in OpenLDAP in versions before 2.4.56 Affected: before 2.4.56 |
| CVE-2020-25709 | 7.5 | May 18 | A flaw was found in OpenLDAP Affected: before 2.4.56 |
| CVE-2021-27212 | 7.5 | Feb 14 | In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a… Affected: through 2.4.57; 2.5.0; 2.5.1 |
| CVE-2020-36221 | 7.5 | Jan 25 | An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c… Affected: before 2.4.57 |
| CVE-2020-36222 | 7.5 | Jan 25 | A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service Affected: before 2.4.57 |
| CVE-2020-36224 | 7.5 | Jan 25 | A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service Affected: before 2.4.57 |
| CVE-2020-36225 | 7.5 | Jan 25 | A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service Affected: before 2.4.57 |
| CVE-2020-36226 | 7.5 | Jan 25 | A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service Affected: before 2.4.57 |
| CVE-2020-36228 | 7.5 | Jan 25 | An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service Affected: before 2.4.57 |
| CVE-2020-36229 | 7.5 | Jan 25 | A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in ad_keystring, resulting in denial of service Affected: before 2.4.57 |
| CVE-2020-36230 | 7.5 | Jan 25 | A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service Affected: before 2.4.57 |
| CVE-2020-36227 | 7.5 | Jan 25 | A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service Affected: before 2.4.57 |
| CVE-2020-36223 | 7.5 | Jan 25 | A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and… Affected: before 2.4.57 |
| CVE-2020-25692 | 7.5 | Dec 8 | A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs Affected: before 2.4.55 |
| CVE-2020-12243 | 7.5 | Apr 28 | In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash) Affected: before 2.4.50 |
| CVE-2014-8182 | 7.5 | Jan 2 | An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages Affected: 2.4 |
| CVE-2019-13565 | 7.5 | Jul 26 | An issue was discovered in OpenLDAP 2.x before 2.4.48 Affected: 2.0 through 2.4.47 |
| CVE-2017-17740 | 7.5 | Dec 18 | contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the… Affected: through 2.4.45 |
| CVE-2015-3276 | 7.5 | Dec 7 | The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than… Affected: before 2.5 |
| CVE-2006-5779 | 7.5 | Nov 7 | OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via LDAP BIND requests with long authcid names, which triggers an assertion failure Affected: before 2.3.29 |
Showing 21