The version of openldap installed on the remote host is prior to 2.4.40-16.36. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1741 advisory.

    An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session     encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain     access that would otherwise be denied via a simple bind for any identity covered in those ACLs. After the     first SASL bind is completed, the sasl_ssf value is retained for all new non-SASL connections. Depending     on the ACL configuration, this can affect different types of operations (searches, modifications, etc.).
    In other words, a successful authorization step completed by one user affects the authorization     requirement for a different user. (CVE-2019-13565)

    An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate     Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).
    (CVE-2020-36221)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the     saslAuthzTo validation, resulting in denial of service. (CVE-2020-36222)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter     control handling, resulting in denial of service (double free and out-of-bounds read). (CVE-2020-36223)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the     saslAuthzTo processing, resulting in denial of service. (CVE-2020-36224)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the     saslAuthzTo processing, resulting in denial of service. (CVE-2020-36225)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash     in the saslAuthzTo processing, resulting in denial of service. (CVE-2020-36226)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop     Cancel operation, resulting in denial of service. (CVE-2020-36227)

    An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate     List Exact Assertion processing, resulting in denial of service. (CVE-2020-36228)

    A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN     parsing in ad_keystring, resulting in denial of service. (CVE-2020-36229)

    A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN     parsing in decode.c ber_next_element, resulting in denial of service. (CVE-2020-36230)

    In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion  ...

    NOTE: https://bugs.openldap.org/show_bug.cgi?id=9454NOTE: trunk:
    https://git.openldap.org/openldap/openldap/-/commit/3539fc33212b528c56b716584f2c2994af7c30b0NOTE: REL_ENG     2.4.x: https://git.openldap.org/openldap/openldap/-/commit/9badb73425a67768c09bcaed1a9c26c684af6c30     (CVE-2021-27212)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7698-1 advisory.

    It was discovered that OpenLDAP incorrectly handled Certificate Exact Assertion processing. A remote     attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service.
    (CVE-2020-36221)

    It was discovered that OpenLDAP incorrectly handled saslAuthzTo processing. A remote attacker could use     this issue to cause OpenLDAP to crash, resulting in a denial of service, or possibly execute arbitrary     code. (CVE-2020-36222, CVE-2020-36224, CVE-2020-36225, CVE-2020-36226)

    It was discovered that OpenLDAP incorrectly handled Return Filter control handling. A remote attacker     could use this issue to cause OpenLDAP to crash, resulting in a denial of service, or possibly execute     arbitrary code. (CVE-2020-36223)

    It was discovered that OpenLDAP incorrectly handled certain cancel operations. A remote attacker could     possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service. (CVE-2020-36227)

    It was discovered that OpenLDAP incorrectly handled Certificate List Extract Assertion processing. A     remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of     service. (CVE-2020-36228)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

在 OpenLDAP (輕量型目錄存取通訊協定的免費實作) 中發現若干弱點。未經驗證的遠端攻擊者可利用這些瑕疵，透過特製的封包造成拒絕服務 (slapd 程序損毀)。

遠端主機執行的 macOS/Mac OS X 版本為 10.15.x 版的 10.15.7 安全性更新 2021-003 Catalina 之前版本。因此會受到包括以下在內的多個弱點影響：

  - 遠端攻擊者或可造成應用程式意外終止，或執行任意程式碼。
    (CVE-2021-30712)

  - 遠端攻擊者或可造成應用程式意外終止，或執行任意程式碼。
    (CVE-2021-30678)

  - 應用程式或許可以透過核心權限執行任意程式碼。(CVE-2021-30704)

請注意，Nessus 並未測試此問題，而是僅依據作業系統自我報告的版本號碼。

遠端主機執行的 macOS/Mac OS X 版本為 10.14.x 版的 10.14.6 安全性更新 2021-004 Mojave 之前版本。因此會受到包括以下在內的多個弱點影響：

  - 遠端攻擊者或可造成應用程式意外終止，或執行任意程式碼。
    (CVE-2021-30712)

  - 遠端攻擊者或可造成應用程式意外終止，或執行任意程式碼。
    (CVE-2021-30678)

  - 應用程式或許可以透過核心權限執行任意程式碼。(CVE-2021-30704)

請注意，Nessus 並未測試此問題，而是僅依據作業系統自我報告的版本號碼。

遠端主機上安裝的 openldap 版本為 2.4.44-25 之前版本。因此，會受到 ALAS2-2023-2033 公告中所提及的多個弱點影響。

  - 在 OpenLDAP 2.x 至 2.4.48 版中發現一個問題。當使用 SASL 驗證和工作階段加密，並依賴於 slapd 存取控制中的 SASL 安全層時，可能可以獲得存取權，否則將透過對這些 ACL 中涵蓋的任何身份的簡單繫結來拒絕存取。在完成第一個 SASL 繫結後，將為所有新的非 SASL 連線保留 sasl_ssf 值。根據 ACL 組態，這可能會影響不同類型的作業 (搜尋，修改等)。
    換句話說，一位使用者完成的成功授權步驟會影響另一位使用者的授權要求。(CVE-2019-13565)

  - 在 OpenLDAP 2.4.57 之前版本中發現一個整數反向溢位問題，會導致 slapd 在 Certificate Exact Assertion 處理中發生損毀，進而造成拒絕服務 (schema_init.c serialNumberAndIssuerCheck)。
    (CVE-2020-36221)

  - 在 OpenLDAP 2.4.57 之前版本中發現一個瑕疵，會導致 slapd 在 saslAuthzTo 驗證中發生宣告失敗，進而造成拒絕服務。(CVE-2020-36222)

  - 在 OpenLDAP 2.4.57 之前版本中發現一個瑕疵，會導致 Values Return Filter 控制項處理中發生 slapd 損毀，進而造成拒絕服務 (重複釋放和超出邊界讀取)。(CVE-2020-36223)

  - 在 OpenLDAP 2.4.57 之前版本中發現一個瑕疵，會導致 saslAuthzTo 驗證中發生無效的指標釋放和 slapd 損毀，進而造成拒絕服務。(CVE-2020-36224)

  - 在 OpenLDAP 2.4.57 之前版本中發現一個瑕疵，會導致 saslAuthzTo 處理中發生 memch->bv_len 計算錯誤和 slapd 損毀，進而造成拒絕服務。(CVE-2020-36226)

  - 在 OpenLDAP 2.4.57 之前版本中發現一個瑕疵，會導致 slapd 在 cancel_extop Cancel 作業中發生無限迴圈，進而造成拒絕服務。(CVE-2020-36227)

  - 在 OpenLDAP 2.4.57 之前版本中發現一個整數反向溢位問題，會導致 slapd 在 Certificate List Exact Assertion 處理中發生損毀，進而造成拒絕服務 (CVE-2020-36228)。

  - 在 OpenLDAP 2.4.57 之前版本的 ldap_X509dn2bv 中發現一個瑕疵，會導致 ad_keystring 中執行 X.509 DN 剖析時發生 slapd 損毀，進而造成拒絕服務。(CVE-2020-36229)

  - 在 OpenLDAP 2.4.57 之前版本中發現一個瑕疵，會導致 decode.c ber_next_element 中執行 X.509 DN 剖析時 slapd 發生宣告失敗，進而造成拒絕服務。(CVE-2020-36230)

  - 在 OpenLDAP 2.4.57 之前的所有版本和 2.5.x 至 2.5.1 alpha 版本中，透過特製的封包，可以在 issuerAndThisUpdateCheck 函式中造成 slapd 宣告失敗，進而透過短時間戳記導致拒絕服務 (程序結束)。這與 schema_init.c 和 checkTime 有關。(CVE-2021-27212)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端主機上安裝的 openldap 版本為 2.4.40-16.36 之前版本。因此，會受到 ALAS-2023-1741 公告中所提及的多個弱點影響。

  - 在 OpenLDAP 2.x 至 2.4.48 版中發現一個問題。當使用 SASL 驗證和工作階段加密，並依賴於 slapd 存取控制中的 SASL 安全層時，可能可以獲得存取權，否則將透過對這些 ACL 中涵蓋的任何身份的簡單繫結來拒絕存取。在完成第一個 SASL 繫結後，將為所有新的非 SASL 連線保留 sasl_ssf 值。根據 ACL 組態，這可能會影響不同類型的作業 (搜尋，修改等)。
    換句話說，一位使用者完成的成功授權步驟會影響另一位使用者的授權要求。(CVE-2019-13565)

  - 在 OpenLDAP 2.4.57 之前版本中發現一個整數反向溢位問題，會導致 slapd 在 Certificate Exact Assertion 處理中發生損毀，進而造成拒絕服務 (schema_init.c serialNumberAndIssuerCheck)。
    (CVE-2020-36221)

  - 在 OpenLDAP 2.4.57 之前版本中發現一個瑕疵，會導致 slapd 在 saslAuthzTo 驗證中發生宣告失敗，進而造成拒絕服務。(CVE-2020-36222)

  - 在 OpenLDAP 2.4.57 之前版本中發現一個瑕疵，會導致 Values Return Filter 控制項處理中發生 slapd 損毀，進而造成拒絕服務 (重複釋放和超出邊界讀取)。(CVE-2020-36223)

  - 在 OpenLDAP 2.4.57 之前版本中發現一個瑕疵，會導致 saslAuthzTo 驗證中發生無效的指標釋放和 slapd 損毀，進而造成拒絕服務。(CVE-2020-36224)

  - 在 OpenLDAP 2.4.57 之前版本中發現一個瑕疵，會導致 saslAuthzTo 處理中發生雙重釋放和 slapd 損毀，進而造成拒絕服務。(CVE-2020-36225)

  - 在 OpenLDAP 2.4.57 之前版本中發現一個瑕疵，會導致 saslAuthzTo 處理中發生 memch->bv_len 計算錯誤和 slapd 損毀，進而造成拒絕服務。(CVE-2020-36226)

  - 在 OpenLDAP 2.4.57 之前版本中發現一個瑕疵，會導致 slapd 在 cancel_extop Cancel 作業中發生無限迴圈，進而造成拒絕服務。(CVE-2020-36227)

  - 在 OpenLDAP 2.4.57 之前版本中發現一個整數反向溢位問題，會導致 slapd 在 Certificate List Exact Assertion 處理中發生損毀，進而造成拒絕服務。(CVE-2020-36228)

  - 在 OpenLDAP 2.4.57 之前版本的 ldap_X509dn2bv 中發現一個瑕疵，會導致 ad_keystring 中執行 X.509 DN 剖析時發生 slapd 損毀，進而造成拒絕服務。(CVE-2020-36229)

  - 在 OpenLDAP 2.4.57 之前版本中發現一個瑕疵，會導致 decode.c ber_next_element 中執行 X.509 DN 剖析時 slapd 發生宣告失敗，進而造成拒絕服務。(CVE-2020-36230)

  - 在 OpenLDAP 2.4.57 之前的所有版本和 2.5.x 至 2.5.1 alpha 版本中，透過特製的封包，可以在 issuerAndThisUpdateCheck 函式中造成 slapd 宣告失敗，進而透過短時間戳記導致拒絕服務 (程序結束)。這與 schema_init.c 和 checkTime 有關。(CVE-2021-27212)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Ubuntu 14.04 LTS 主機上安裝的套件受到 USN-7698-1 公告中所提及的多個弱點影響。

    據發現OpenLDAP 未正確處理 Certificate Exact Assertion 處理。遠端攻擊者可能利用此問題造成 OpenLDAP 損毀，進而導致拒絕服務。
    (CVE-2020-36221)

    據發現OpenLDAP 未正確處理 saslAuthzTo 處理。遠端攻擊者可利用此問題造成 OpenLDAP 損毀進而導致拒絕服務或可能執行任意程式碼。 (CVE-2020-36222, CVE-2020-36224, CVE-2020-36225, CVE-2020-36226)

    據發現OpenLDAP 未正確處理傳回篩選控制項處理。遠端攻擊者可利用此問題造成 OpenLDAP 損毀進而導致拒絕服務或可能執行任意程式碼。 (CVE-2020-36223)

    據發現OpenLDAP 未正確處理某些取消作業。遠端攻擊者可能利用此問題造成 OpenLDAP 損毀，進而導致拒絕服務。(CVE-2020-36227)

    據發現OpenLDAP 未正確處理憑證清單擷取宣告處理。遠端攻擊者可能利用此問題造成 OpenLDAP 損毀，進而導致拒絕服務。(CVE-2020-36228)

Tenable 已直接從 Ubuntu 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

An update of the openldap package has been released.

According to the versions of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw was discovered in ldap_X509dn2bv in OpenLDAP     before 2.4.57 leading to a slapd crash in the X.509 DN     parsing in ad_keystring, resulting in denial of     service.(CVE-2020-36229)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     in an assertion failure in slapd in the X.509 DN     parsing in decode.c ber_next_element, resulting in     denial of service.(CVE-2020-36230)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a double free and slapd crash in the saslAuthzTo     processing, resulting in denial of     service.(CVE-2020-36225)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a memch->bv_len miscalculation and slapd crash in     the saslAuthzTo processing, resulting in denial of     service.(CVE-2020-36226)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a slapd crash in the Values Return Filter control     handling, resulting in denial of service (double free     and out-of-bounds read).(CVE-2020-36223)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an assertion failure in slapd in the saslAuthzTo     validation, resulting in denial of     service.(CVE-2020-36222)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an invalid pointer free and slapd crash in the     saslAuthzTo processing, resulting in denial of     service.(CVE-2020-36224)

  - An integer underflow was discovered in OpenLDAP before     2.4.57 leading to slapd crashes in the Certificate     Exact Assertion processing, resulting in denial of     service (schema_init.c     serialNumberAndIssuerCheck).(CVE-2020-36221)

  - In OpenLDAP through 2.4.57 and 2.5.x through     2.5.1alpha, an assertion failure in slapd can occur in     the issuerAndThisUpdateCheck function via a crafted     packet, resulting in a denial of service (daemon exit)     via a short timestamp. This is related to schema_init.c     and checkTime.(CVE-2021-27212)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an infinite loop in slapd with the cancel_extop     Cancel operation, resulting in denial of     service.(CVE-2020-36227)

  - An integer underflow was discovered in OpenLDAP before     2.4.57 leading to a slapd crash in the Certificate List     Exact Assertion processing, resulting in denial of     service.(CVE-2020-36228)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openldap packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - In OpenLDAP through 2.4.57 and 2.5.x through     2.5.1alpha, an assertion failure in slapd can occur in     the issuerAndThisUpdateCheck function via a crafted     packet, resulting in a denial of service (daemon exit)     via a short timestamp. This is related to schema_init.c     and checkTime.(CVE-2021-27212)

  - An integer underflow was discovered in OpenLDAP before     2.4.57 leading to slapd crashes in the Certificate     Exact Assertion processing, resulting in denial of     service (schema_init.c     serialNumberAndIssuerCheck).(CVE-2020-36221)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an assertion failure in slapd in the saslAuthzTo     validation, resulting in denial of     service.(CVE-2020-36222)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a slapd crash in the Values Return Filter control     handling, resulting in denial of service (double free     and out-of-bounds read).(CVE-2020-36223)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an invalid pointer free and slapd crash in the     saslAuthzTo processing, resulting in denial of     service.(CVE-2020-36224)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a double free and slapd crash in the saslAuthzTo     processing, resulting in denial of     service.(CVE-2020-36225)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a memch->bv_len miscalculation and slapd crash in     the saslAuthzTo processing, resulting in denial of     service.(CVE-2020-36226)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an infinite loop in slapd with the cancel_extop     Cancel operation, resulting in denial of     service.(CVE-2020-36227)

  - An integer underflow was discovered in OpenLDAP before     2.4.57 leading to a slapd crash in the Certificate List     Exact Assertion processing, resulting in denial of     service.(CVE-2020-36228)

  - A flaw was discovered in ldap_X509dn2bv in OpenLDAP     before 2.4.57 leading to a slapd crash in the X.509 DN     parsing in ad_keystring, resulting in denial of     service.(CVE-2020-36229)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     in an assertion failure in slapd in the X.509 DN     parsing in decode.c ber_next_element, resulting in     denial of service.(CVE-2020-36230)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed     by OpenLDAP's slapd server, to trigger an assertion failure. The highest threat from this vulnerability is     to system availability. (CVE-2020-25709)

  - A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious     packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this     vulnerability is to system availability. (CVE-2020-25710)

  - An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate     Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).
    (CVE-2020-36221)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the     saslAuthzTo validation, resulting in denial of service. (CVE-2020-36222)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter     control handling, resulting in denial of service (double free and out-of-bounds read). (CVE-2020-36223)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the     saslAuthzTo processing, resulting in denial of service. (CVE-2020-36224)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the     saslAuthzTo processing, resulting in denial of service. (CVE-2020-36225)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash     in the saslAuthzTo processing, resulting in denial of service. (CVE-2020-36226)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop     Cancel operation, resulting in denial of service. (CVE-2020-36227)

  - An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate     List Exact Assertion processing, resulting in denial of service. (CVE-2020-36228)

  - A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN     parsing in ad_keystring, resulting in denial of service. (CVE-2020-36229)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN     parsing in decode.c ber_next_element, resulting in denial of service. (CVE-2020-36230)

  - In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the     issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via     a short timestamp. This is related to schema_init.c and checkTime. (CVE-2021-27212)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several vulnerabilities were discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. An unauthenticated remote attacker can take advantage of these flaws to cause a denial of service (slapd daemon crash, infinite loops) via specially crafted packets.

For Debian 9 stretch, these problems have been fixed in version 2.4.44+dfsg-5+deb9u7.

We recommend that you upgrade your openldap packages.

For the detailed security status of openldap please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/openldap

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An integer underflow was discovered in OpenLDAP before     2.4.57 leading to slapd crashes in the Certificate     Exact Assertion processing, resulting in denial of     service (schema_init.c     serialNumberAndIssuerCheck).(CVE-2020-36221)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an assertion failure in slapd in the saslAuthzTo     validation, resulting in denial of     service.(CVE-2020-36222)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a slapd crash in the Values Return Filter control     handling, resulting in denial of service (double free     and out-of-bounds read).(CVE-2020-36223)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an invalid pointer free and slapd crash in the     saslAuthzTo processing, resulting in denial of     service.(CVE-2020-36224)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a double free and slapd crash in the saslAuthzTo     processing, resulting in denial of     service.(CVE-2020-36225)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a memch->bv_len miscalculation and slapd crash in     the saslAuthzTo processing, resulting in denial of     service.(CVE-2020-36226)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an infinite loop in slapd with the cancel_extop     Cancel operation, resulting in denial of     service.(CVE-2020-36227)

  - An integer underflow was discovered in OpenLDAP before     2.4.57 leading to a slapd crash in the Certificate List     Exact Assertion processing, resulting in denial of     service.(CVE-2020-36228)

  - A flaw was discovered in ldap_X509dn2bv in OpenLDAP     before 2.4.57 leading to a slapd crash in the X.509 DN     parsing in ad_keystring, resulting in denial of     service.(CVE-2020-36229)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     in an assertion failure in slapd in the X.509 DN     parsing in decode.c ber_next_element, resulting in     denial of service.(CVE-2020-36230)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4724-1 advisory.

    It was discovered that OpenLDAP incorrectly handled Certificate Exact Assertion processing. A remote     attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service.
    (CVE-2020-36221)

    It was discovered that OpenLDAP incorrectly handled saslAuthzTo processing. A remote attacker could use     this issue to cause OpenLDAP to crash, resulting in a denial of service, or possibly execute arbitrary     code. (CVE-2020-36222, CVE-2020-36224, CVE-2020-36225, CVE-2020-36226)

    It was discovered that OpenLDAP incorrectly handled Return Filter control handling. A remote attacker     could use this issue to cause OpenLDAP to crash, resulting in a denial of service, or possibly execute     arbitrary code. (CVE-2020-36223)

    It was discovered that OpenLDAP incorrectly handled certain cancel operations. A remote attacker could     possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service. (CVE-2020-36227)

    It was discovered that OpenLDAP incorrectly handled Certificate List Extract Assertion processing. A     remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of     service. (CVE-2020-36228)

    It was discovered that OpenLDAP incorrectly handled X.509 DN parsing. A remote attacker could possibly use     this issue to cause OpenLDAP to crash, resulting in a denial of service. (CVE-2020-36229, CVE-2020-36230)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for openldap2 fixes the following issues :

bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service.

bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN parsing in ad_keystring, resulting in denial of service.

bsc#1182412 CVE-2020-36228 - integer underflow leading to crash in the Certificate List Exact Assertion processing, resulting in denial of service.

bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.

bsc#1182416 CVE-2020-36225 - double free and slapd crash in the saslAuthzTo processing, resulting in denial of service.

bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.

bsc#1182415 CVE-2020-36226 - memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.

bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.

bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).

bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).

bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp.
This is related to schema_init.c and checkTime.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
175093	Amazon Linux AMI : openldap (ALAS-2023-1741)	Nessus	Amazon Linux Local Security Checks	2023/5/4	2024/12/11	high
252281	Ubuntu 14.04 LTS : OpenLDAP vulnerabilities (USN-7698-1)	Nessus	Ubuntu Local Security Checks	2025/8/19	2025/8/19	high
146122	Debian DSA-4845-1：openldap - 安全性更新	Nessus	Debian Local Security Checks	2021/2/4	2024/1/24	high
149984	macOS 10.15.x < 10.15.7 安全性更新 2021-002 Catalina (HT212530)	Nessus	MacOS X Local Security Checks	2021/5/26	2024/5/28	critical
149985	macOS 10.14.x < 10.14.6 安全性更新 2021-004 Mojave (HT212531)	Nessus	MacOS X Local Security Checks	2021/5/26	2024/5/28	critical
175021	Amazon Linux 2：openldap (ALAS-2023-2033)	Nessus	Amazon Linux Local Security Checks	2023/5/2	2024/12/11	high
175093	Amazon Linux AMI：openldap (ALAS-2023-1741)	Nessus	Amazon Linux Local Security Checks	2023/5/4	2024/12/11	high
252281	Ubuntu 14.04 LTS：OpenLDAP 弱點 (USN-7698-1)	Nessus	Ubuntu Local Security Checks	2025/8/19	2025/8/19	high
146487	Photon OS 2.0: Openldap PHSA-2021-2.0-0318	Nessus	PhotonOS Local Security Checks	2021/2/14	2024/7/22	high
149100	EulerOS 2.0 SP3 : openldap (EulerOS-SA-2021-1824)	Nessus	Huawei Local Security Checks	2021/4/30	2024/1/3	high
151166	EulerOS Virtualization for ARM 64 3.0.6.0 : openldap (EulerOS-SA-2021-2004)	Nessus	Huawei Local Security Checks	2021/6/30	2023/12/12	high
156517	EulerOS Virtualization 3.0.2.6 : openldap (EulerOS-SA-2021-2895)	Nessus	Huawei Local Security Checks	2022/1/6	2023/11/21	high
146191	Debian DLA-2544-1 : openldap security update	Nessus	Debian Local Security Checks	2021/2/4	2024/1/23	high
146256	EulerOS 2.0 SP9 : openldap (EulerOS-SA-2021-1269)	Nessus	Huawei Local Security Checks	2021/2/5	2024/1/23	high
146302	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : OpenLDAP vulnerabilities (USN-4724-1)	Nessus	Ubuntu Local Security Checks	2021/2/8	2024/8/28	high
147030	SUSE SLES12 Security Update : openldap2 (SUSE-SU-2021:0692-1)	Nessus	SuSE Local Security Checks	2021/3/4	2024/1/18	high
504019	Siemens SIMATIC S7-1500 Missing Encryption of Sensitive Data (CVE-2020-36226)	Tenable OT Security	Tenable.ot	2025/11/13	2025/11/13	high

检测

插件搜索

high

high

high

critical

critical

high

high

high

high

high

high

high

high

high

high

high

high