Описание
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 2.4.45+dfsg-1ubuntu1.8 |
| devel | released | 2.4.53+dfsg-1ubuntu5 |
| esm-infra-legacy/trusty | released | 2.4.31-1+nmu2ubuntu8.5+esm4 |
| esm-infra/bionic | released | 2.4.45+dfsg-1ubuntu1.8 |
| esm-infra/focal | released | 2.4.49+dfsg-2ubuntu1.5 |
| esm-infra/xenial | released | 2.4.42+dfsg-2ubuntu3.11 |
| focal | released | 2.4.49+dfsg-2ubuntu1.5 |
| groovy | released | 2.4.53+dfsg-1ubuntu1.2 |
| precise/esm | not-affected | 2.4.28-1.1ubuntu4.12 |
| trusty | ignored | end of standard support |
Показывать по
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allo ...
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.
Уязвимость функции csnNormalize23() реализации протокола LDAP OpenLDAP, связанная с недостатком использования функции assert(), позволяющая нарушителю вызвать отказ в обслуживании
EPSS
5 Medium
CVSS2
7.5 High
CVSS3