OP
Vendor
Openldap
60
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-2953 | OP Openldap Openldap | 7.5 | May 30 | A vulnerability was found in openldap |
| CVE-2022-29155 | OP Openldap Openldap | 9.8 | May 4 | In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query |
| CVE-2020-25710 | OP Openldap Openldap | 7.5 | May 28 | A flaw was found in OpenLDAP in versions before 2.4.56 |
| CVE-2020-25709 | OP Openldap Openldap | 7.5 | May 18 | A flaw was found in OpenLDAP |
| CVE-2021-27212 | OP Openldap Openldap | 7.5 | Feb 14 | In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a… |
| CVE-2020-36221 | OP Openldap Openldap | 7.5 | Jan 25 | An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c… |
| CVE-2020-36222 | OP Openldap Openldap | 7.5 | Jan 25 | A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service |
| CVE-2020-36224 | OP Openldap Openldap | 7.5 | Jan 25 | A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service |
| CVE-2020-36225 | OP Openldap Openldap | 7.5 | Jan 25 | A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service |
| CVE-2020-36226 | OP Openldap Openldap | 7.5 | Jan 25 | A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service |
| CVE-2020-36228 | OP Openldap Openldap | 7.5 | Jan 25 | An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service |
| CVE-2020-36229 | OP Openldap Openldap | 7.5 | Jan 25 | A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in ad_keystring, resulting in denial of service |
| CVE-2020-36230 | OP Openldap Openldap | 7.5 | Jan 25 | A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service |
| CVE-2020-36227 | OP Openldap Openldap | 7.5 | Jan 25 | A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service |
| CVE-2020-36223 | OP Openldap Openldap | 7.5 | Jan 25 | A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and… |
| CVE-2020-25692 | OP Openldap Openldap | 7.5 | Dec 8 | A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs |
| CVE-2020-15719 | OP Openldap Openldap | 4.2 | Jul 14 | libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support |
| CVE-2020-12243 | OP Openldap Openldap | 7.5 | Apr 28 | In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash) |
| CVE-2014-8182 | OP Openldap Openldap | 7.5 | Jan 2 | An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages |
| CVE-2019-13565 | OP Openldap Openldap | 7.5 | Jul 26 | An issue was discovered in OpenLDAP 2.x before 2.4.48 |
| CVE-2019-13057 | OP Openldap Openldap | 4.9 | Jul 26 | An issue was discovered in the server in OpenLDAP before 2.4.48 |
| CVE-2017-17740 | OP Openldap Openldap | 7.5 | Dec 18 | contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the… |
| CVE-2017-14159 | OP Openldap Openldap | 4.7 | Sep 5 | slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging… |
| CVE-2016-4984 | OP Openldap-servers Openldap | 4.7 | Jul 17 | /usr/libexec/openldap/generate-server-cert.sh in openldap-servers sets weak permissions for the TLS certificate, which allows local users to obtain the TLS certificate by… |
| CVE-2017-9287 | OP Openldap Openldap | 6.5 | May 29 | servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability |
| CVE-2015-3276 | OP Openldap Openldap | 7.5 | Dec 7 | The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than… |
| CVE-2015-6908 | OP Openldap Openldap | – | Sep 11 | The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable assertion and application crash)… |
| CVE-2014-9713 | OP Openldap Openldap | – | Apr 1 | The default slapd configuration in the Debian openldap package 2.4.23-3 through 2.4.39-1.1 allows remote authenticated users to modify the user's permissions and other user… |
| CVE-2015-1546 | OP Openldap Openldap | – | Feb 12 | Double free vulnerability in the get_vrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of service (crash) via a crafted… |
| CVE-2015-1545 | OP Openldap Openldap | – | Feb 12 | The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service (NULL pointer dereference and… |
| CVE-2013-4449 | OP Openldap Openldap | – | Feb 5 | The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service (slapd crash) by unbinding… |
| CVE-2012-1164 | OP Openldap Openldap | – | Jun 29 | slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which… |
| CVE-2012-2668 | OP Openldap Openldap | – | Jun 17 | libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS backend, always uses the default cipher suite even when TLSCipherSuite is set, which… |
| CVE-2011-4079 | OP Openldap Openldap | – | Oct 27 | Off-by-one error in the UTF8StringNormalize function in OpenLDAP 2.4.26 and earlier allows remote attackers to cause a denial of service (slapd crash) via a zero-length string… |
| CVE-2011-1024 | OP Openldap Openldap | – | Mar 20 | chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicy_forward_updates (aka authentication-failure forwarding) is… |
| CVE-2011-1081 | OP Openldap Openldap | – | Mar 20 | modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service (daemon crash) via a relative Distinguished Name (DN) modification request… |
| CVE-2011-1025 | OP Openldap Openldap | – | Mar 20 | bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name (DN), which allows remote attackers to bypass intended access… |
| CVE-2010-0212 | OP Openldap Openldap | – | Jul 28 | OpenLDAP 2.4.22 allows remote attackers to cause a denial of service (crash) via a modrdn call with a zero-length RDN destination string, which is not properly handled by the… |
| CVE-2010-0211 | OP Openldap Openldap | 9.8 | Jul 28 | The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a… |
| CVE-2009-3767 | OP Openldap Openldap | – | Oct 23 | libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's… |
| CVE-2008-2952 | OP Openldap Openldap | – | Jul 1 | liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via crafted ASN.1 BER datagrams that trigger an assertion error |
| CVE-2008-0658 | OP Openldap Openldap | – | Feb 13 | slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a… |
| CVE-2007-6698 | OP Openldap Openldap | – | Feb 1 | The BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a denial of service (crash) via a potentially-successful modify operation with the… |
| CVE-2007-5707 | OP Openldap Openldap | – | Oct 30 | OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service (slapd crash) via an LDAP request with a malformed objectClasses attribute |
| CVE-2007-5708 | OP Openldap Openldap | – | Oct 30 | slapo-pcache (overlays/pcache.c) in slapd in OpenLDAP before 2.3.39, when running as a proxy-caching server, allocates memory using a malloc variant instead of calloc, which… |
| CVE-2006-6493 | OP Openldap Openldap | – | Dec 13 | Buffer overflow in the krbv4_ldap_auth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and earlier, when OpenLDAP is compiled with the --enable-kbind (Kerberos KBIND)… |
| CVE-2006-5779 | OP Openldap Openldap | 7.5 | Nov 7 | OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via LDAP BIND requests with long authcid names, which triggers an assertion failure |
| CVE-2006-4600 | OP Openldap Openldap | – | Sep 7 | slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges to modify arbitrary Distinguished Names (DN) |
| CVE-2006-2754 | OP Openldap Openldap | – | Jun 1 | Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary code via a long hostname |
| CVE-2005-4442 | OP Openldap Openldap | – | Dec 21 | Untrusted search path vulnerability in OpenLDAP before 2.2.28-r3 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the… |
| CVE-2004-1880 | OP Openldap Openldap | – | Dec 31 | Memory leak in the back-bdb backend for OpenLDAP 2.1.12 and earlier allows remote attackers to cause a denial of service (memory consumption) |
| CVE-2004-0823 | OP Openldap Openldap | – | Sep 7 | OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes to use hashed (crypt)… |
| CVE-2003-1201 | OP Openldap Openldap | – | Mar 20 | ldbm_back_exop_passwd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slap_passwd_parse function does not return LDAP_SUCCESS, attempts to free an… |
| CVE-2002-1508 | OP Openldap Openldap | – | Feb 19 | slapd in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows local users to overwrite arbitrary files via a race condition during the creation of a log file for rejected replication… |
| CVE-2002-1379 | OP Openldap Openldap | – | Jan 2 | OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows remote or local attackers to execute arbitrary code when libldap reads the .ldaprc file within applications that are running with… |
| CVE-2002-1378 | OP Openldap Openldap | – | Jan 2 | Multiple buffer overflows in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allow remote attackers to execute arbitrary code via (1) long -t or -r parameters to slurpd, (2) a malicious… |
| CVE-2002-0045 | OP Openldap Openldap | – | Jan 31 | slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" action on access controls without any values, which causes… |
| CVE-2001-0977 | OP Openldap Openldap | – | Jul 16 | slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash) via an invalid Basic Encoding Rules (BER) length field |
| CVE-2000-0748 | OP Openldap Openldap | – | Oct 20 | OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to replace the binary with a Trojan horse |
| CVE-2000-0336 | OP Openldap Openldap | – | Apr 21 | Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack |