Поиск уязвимостей
Количество 22
Количество 22
ALT-PU-2022-2606
ALT-PU-2022-2606: package `openldap` update to version 2.6.3-alt1
CVE-2015-3276
The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.
CVE-2015-3276
The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.
CVE-2015-3276
The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.
CVE-2015-3276
CVE-2015-3276
The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDA ...
CVE-2022-29155
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.
CVE-2022-29155
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.
CVE-2022-29155
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.
CVE-2022-29155
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2 a SQL injection vulnerability exists in the experimental back-sql backend to slapd via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed due to a lack of proper escaping.
CVE-2022-29155
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection ...
GHSA-cc3w-xgwq-vgw8
The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.
ELSA-2015-2131
ELSA-2015-2131: openldap security, bug fix, and enhancement update (MODERATE)
SUSE-SU-2022:1832-1
Security update for openldap2
SUSE-SU-2022:1771-1
Security update for openldap2
SUSE-SU-2022:1685-1
Security update for openldap2
SUSE-SU-2022:1671-1
Security update for openldap2
SUSE-SU-2022:1670-1
Security update for openldap2
GHSA-9rm2-9q89-9524
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.
BDU:2022-03203
Уязвимость реализации протокола OpenLDAP, связанная с непринятием мер по защите структуры SQL-запроса, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2022-2606 ALT-PU-2022-2606: package `openldap` update to version 2.6.3-alt1 | CVSS3: 9.8 | около 4 лет назад | |
 | CVE-2015-3276 The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors. | CVSS3: 7.5 | 5% Низкий | почти 11 лет назад |
 | CVE-2015-3276 The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors. | CVSS2: 4.3 | 5% Низкий | больше 11 лет назад |
 | CVE-2015-3276 The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors. | CVSS3: 7.5 | 5% Низкий | почти 11 лет назад |
 | CVSS3: 7.5 | 5% Низкий | около 6 лет назад | |
| CVE-2015-3276 The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDA ... | CVSS3: 7.5 | 5% Низкий | почти 11 лет назад |
| CVE-2022-29155 In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping. | CVSS3: 9.8 | 64% Средний | больше 4 лет назад |
| CVE-2022-29155 In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping. | CVSS3: 6.5 | 64% Средний | больше 4 лет назад |
| CVE-2022-29155 In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping. | CVSS3: 9.8 | 64% Средний | больше 4 лет назад |
| CVE-2022-29155 In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2 a SQL injection vulnerability exists in the experimental back-sql backend to slapd via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed due to a lack of proper escaping. | CVSS3: 9.8 | 64% Средний | больше 4 лет назад |
| CVE-2022-29155 In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection ... | CVSS3: 9.8 | 64% Средний | больше 4 лет назад |
| GHSA-cc3w-xgwq-vgw8 The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors. | CVSS3: 7.5 | 5% Низкий | больше 4 лет назад |
| ELSA-2015-2131 ELSA-2015-2131: openldap security, bug fix, and enhancement update (MODERATE) | 5% Низкий | почти 11 лет назад | |
 | SUSE-SU-2022:1832-1 Security update for openldap2 | 64% Средний | больше 4 лет назад | |
| SUSE-SU-2022:1771-1 Security update for openldap2 | 64% Средний | больше 4 лет назад | |
| SUSE-SU-2022:1685-1 Security update for openldap2 | 64% Средний | больше 4 лет назад | |
| SUSE-SU-2022:1671-1 Security update for openldap2 | 64% Средний | больше 4 лет назад | |
| SUSE-SU-2022:1670-1 Security update for openldap2 | 64% Средний | больше 4 лет назад | |
| GHSA-9rm2-9q89-9524 In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping. | CVSS3: 9.8 | 64% Средний | больше 4 лет назад |
 | BDU:2022-03203 Уязвимость реализации протокола OpenLDAP, связанная с непринятием мер по защите структуры SQL-запроса, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации | CVSS3: 9.8 | 64% Средний | больше 4 лет назад |
Уязвимостей на страницу