According to the versions of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in OpenLDAP 2.x before 2.4.48.
    When using SASL authentication and session encryption,     and relying on the SASL security layers in slapd access     controls, it is possible to obtain access that would     otherwise be denied via a simple bind for any identity     covered in those ACLs. After the first SASL bind is     completed, the sasl_ssf value is retained for all new     non-SASL connections. Depending on the ACL     configuration, this can affect different types of     operations (searches, modifications, etc.). In other     words, a successful authorization step completed by one     user affects the authorization requirement for a     different user.(CVE-2019-13565)

  - An issue was discovered in the server in OpenLDAP     before 2.4.48. When the server administrator delegates     rootDN (database admin) privileges for certain     databases but wants to maintain isolation (e.g., for     multi-tenant deployments), slapd does not properly stop     a rootDN from requesting authorization as an identity     from another database during a SASL bind or with a     proxyAuthz (RFC 4370) control. (It is not a common     configuration to deploy a system where the server     administrator and a DB administrator enjoy different     levels of trust.)(CVE-2019-13057)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for openldap2 fixes the following issues :

CVE-2020-12243: Fixed a denial of service related to recursive filters (bsc#1170771).

CVE-2019-13565: Fixed an authentication bypass caused by incorrect authorization of another connection, granting excess connection rights (bsc#1143194).

CVE-2019-13057: Fixed an issue with improper authorization with delegated database admin privileges (bsc#1143273).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - An issue was discovered in OpenLDAP 2.x before 2.4.48.
    When using SASL authentication and session encryption,     and relying on the SASL security layers in slapd access     controls, it is possible to obtain access that would     otherwise be denied via a simple bind for any identity     covered in those ACLs. After the first SASL bind is     completed, the sasl_ssf value is retained for all new     non-SASL connections. Depending on the ACL     configuration, this can affect different types of     operations (searches, modifications, etc.). In other     words, a successful authorization step completed by one     user affects the authorization requirement for a     different user.(CVE-2019-13565)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the openldap packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - An issue was discovered in OpenLDAP 2.x before 2.4.48.
    When using SASL authentication and session encryption,     and relying on the SASL security layers in slapd access     controls, it is possible to obtain access that would     otherwise be denied via a simple bind for any identity     covered in those ACLs. After the first SASL bind is     completed, the sasl_ssf value is retained for all new     non-SASL connections. Depending on the ACL     configuration, this can affect different types of     operations (searches, modifications, etc.). In other     words, a successful authorization step completed by one     user affects the authorization requirement for a     different user.(CVE-2019-13565)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of openldap installed on the remote host is prior to 2.4.44-25. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2033 advisory.

    An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session     encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain     access that would otherwise be denied via a simple bind for any identity covered in those ACLs. After the     first SASL bind is completed, the sasl_ssf value is retained for all new non-SASL connections. Depending     on the ACL configuration, this can affect different types of operations (searches, modifications, etc.).
    In other words, a successful authorization step completed by one user affects the authorization     requirement for a different user. (CVE-2019-13565)

    An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate     Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).
    (CVE-2020-36221)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the     saslAuthzTo validation, resulting in denial of service. (CVE-2020-36222)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter     control handling, resulting in denial of service (double free and out-of-bounds read). (CVE-2020-36223)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the     saslAuthzTo processing, resulting in denial of service. (CVE-2020-36224)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash     in the saslAuthzTo processing, resulting in denial of service. (CVE-2020-36226)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop     Cancel operation, resulting in denial of service. (CVE-2020-36227)

    An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate     List Exact Assertion processing, resulting in denial of service. (CVE-2020-36228)

    A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN     parsing in ad_keystring, resulting in denial of service. (CVE-2020-36229)

    A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN     parsing in decode.c ber_next_element, resulting in denial of service. (CVE-2020-36230)

    In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion  ...

    NOTE: https://bugs.openldap.org/show_bug.cgi?id=9454NOTE: trunk:
    https://git.openldap.org/openldap/openldap/-/commit/3539fc33212b528c56b716584f2c2994af7c30b0NOTE: REL_ENG     2.4.x: https://git.openldap.org/openldap/openldap/-/commit/9badb73425a67768c09bcaed1a9c26c684af6c30     (CVE-2021-27212)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Several security vulnerabilities were discovered in openldap, a server and tools to provide a standalone directory service.

CVE-2019-13057

When the server administrator delegates rootDN (database admin) privileges for certain databases but wants to maintain isolation (e.g., for multi-tenant deployments), slapd does not properly stop a rootDN from requesting authorization as an identity from another database during a SASL bind or with a proxyAuthz (RFC 4370) control.
(It is not a common configuration to deploy a system where the server administrator and a DB administrator enjoy different levels of trust.)

CVE-2019-13565

When using SASL authentication and session encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain access that would otherwise be denied via a simple bind for any identity covered in those ACLs. After the first SASL bind is completed, the sasl_ssf value is retained for all new non-SASL connections. Depending on the ACL configuration, this can affect different types of operations (searches, modifications, etc.). In other words, a successful authorization step completed by one user affects the authorization requirement for a different user.

For Debian 8 'Jessie', these problems have been fixed in version 2.4.40+dfsg-1+deb8u5.

We recommend that you upgrade your openldap packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for openldap2 fixes the following issues :

Security issues fixed :

CVE-2019-13565: Fixed ssf memory reuse that leads to incorrect authorization of another connection, granting excess connection rights (ssf) (bsc#1143194).

CVE-2019-13057: Fixed rootDN of a backend that may proxyauth incorrectly to another backend, violating multi-tenant isolation (bsc#1143273).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
131850	EulerOS 2.0 SP2 : openldap (EulerOS-SA-2019-2358)	Nessus	Huawei Local Security Checks	2019/12/10	2024/4/5	high
136650	SUSE SLES12 Security Update : openldap2 (SUSE-SU-2020:1210-1)	Nessus	SuSE Local Security Checks	2020/5/15	2024/3/12	high
130640	EulerOS 2.0 SP5 : openldap (EulerOS-SA-2019-2178)	Nessus	Huawei Local Security Checks	2019/11/8	2024/4/15	high
130821	EulerOS 2.0 SP8 : openldap (EulerOS-SA-2019-2112)	Nessus	Huawei Local Security Checks	2019/11/12	2024/4/12	high
132831	EulerOS Virtualization for ARM 64 3.0.5.0 : openldap (EulerOS-SA-2020-1077)	Nessus	Huawei Local Security Checks	2020/1/13	2024/4/1	high
175021	Amazon Linux 2 : openldap (ALAS-2023-2033)	Nessus	Amazon Linux Local Security Checks	2023/5/2	2026/2/24	high
127927	Debian DLA-1891-1 : openldap security update	Nessus	Debian Local Security Checks	2019/8/20	2024/5/2	high
128991	SUSE SLED12 / SLES12 Security Update : openldap2 (SUSE-SU-2019:2390-1)	Nessus	SuSE Local Security Checks	2019/9/18	2024/4/24	high

检测

插件搜索

high

high

high

high

high

high

high

high