According to the version of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - A NULL pointer dereference was found in OpenLDAP server     and was fixed in openldap 2.4.55, during a request for     renaming RDNs. An unauthenticated attacker could     remotely crash the slapd process by sending a specially     crafted request, causing a Denial of     Service.(CVE-2020-25692)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A NULL pointer dereference was found in OpenLDAP server     and was fixed in openldap 2.4.55, during a request for     renaming RDNs. An unauthenticated attacker could     remotely crash the slapd process by sending a specially     crafted request, causing a Denial of     Service.(CVE-2020-25692)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of openldap installed on the remote host is prior to 2.4.44-23. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1638 advisory.

    A NULL pointer dereference flaw was found in the OpenLDAP server, during a request for renaming RDNs. This     flaw allows a remote, unauthenticated attacker to crash the slapd process by sending a specially crafted     request, causing a denial of service. The highest threat from this vulnerability is to system     availability. (CVE-2020-25692)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the openldap package has been released.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
147686	EulerOS Virtualization 2.9.0 : openldap (EulerOS-SA-2021-1638)	Nessus	Huawei Local Security Checks	2021/3/11	2024/1/10	high
147046	EulerOS Virtualization 3.0.6.6 : openldap (EulerOS-SA-2021-1503)	Nessus	Huawei Local Security Checks	2021/3/4	2024/1/16	high
148052	EulerOS 2.0 SP5 : openldap (EulerOS-SA-2021-1693)	Nessus	Huawei Local Security Checks	2021/3/24	2024/1/8	high
144663	EulerOS 2.0 SP9 : openldap (EulerOS-SA-2021-1013)	Nessus	Huawei Local Security Checks	2021/1/4	2024/1/31	high
145128	EulerOS 2.0 SP3 : openldap (EulerOS-SA-2021-1103)	Nessus	Huawei Local Security Checks	2021/1/20	2024/1/29	high
149873	Amazon Linux 2 : openldap (ALAS-2021-1638)	Nessus	Amazon Linux Local Security Checks	2021/5/24	2024/12/11	high
204347	Photon OS 4.0: Openldap PHSA-2021-4.0-0008	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	high

检测

插件搜索

high

high

high

high

high

high

high