Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2021-1389

Опубликовано: 28 апр. 2021
Источник: oracle-oval
Платформа: Oracle Linux 7

Описание

ELSA-2021-1389: openldap security update (MODERATE)

[2.4.44-23]

  • Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)

Обновленные пакеты

Oracle Linux 7

Oracle Linux aarch64

openldap

2.4.44-23.el7_9

openldap-clients

2.4.44-23.el7_9

openldap-devel

2.4.44-23.el7_9

openldap-servers

2.4.44-23.el7_9

openldap-servers-sql

2.4.44-23.el7_9

Oracle Linux x86_64

openldap

2.4.44-23.el7_9

openldap-clients

2.4.44-23.el7_9

openldap-devel

2.4.44-23.el7_9

openldap-servers

2.4.44-23.el7_9

openldap-servers-sql

2.4.44-23.el7_9

Связанные CVE

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 5 лет назад

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.

CVSS3: 7.5
redhat
больше 5 лет назад

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.

CVSS3: 7.5
nvd
около 5 лет назад

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.

CVSS3: 7.5
msrc
около 5 лет назад

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55 during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request causing a Denial of Service.

CVSS3: 7.5
debian
около 5 лет назад

A NULL pointer dereference was found in OpenLDAP server and was fixed ...