An update of the openldap package has been released.

This update for openldap2 fixes the following issues :

bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service.

bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN parsing in ad_keystring, resulting in denial of service.

bsc#1182412 CVE-2020-36228 - integer underflow leading to crash in the Certificate List Exact Assertion processing, resulting in denial of service.

bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.

bsc#1182416 CVE-2020-36225 - double free and slapd crash in the saslAuthzTo processing, resulting in denial of service.

bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.

bsc#1182415 CVE-2020-36226 - memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.

bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.

bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).

bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).

bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp.
This is related to schema_init.c and checkTime.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for openldap2 fixes the following issues :

  - bsc#1182408 CVE-2020-36230 - an assertion failure in     slapd in the X.509 DN parsing in decode.c     ber_next_element, resulting in denial of service.

  - bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the     X.509 DN parsing in ad_keystring, resulting in denial of     service.

  - bsc#1182412 CVE-2020-36228 - integer underflow leading     to crash in the Certificate List Exact Assertion     processing, resulting in denial of service.

  - bsc#1182413 CVE-2020-36227 - infinite loop in slapd with     the cancel_extop Cancel operation, resulting in denial     of service.

  - bsc#1182416 CVE-2020-36225 - double free and slapd crash     in the saslAuthzTo processing, resulting in denial of     service.

  - bsc#1182417 CVE-2020-36224 - invalid pointer free and     slapd crash in the saslAuthzTo processing, resulting in     denial of service.

  - bsc#1182415 CVE-2020-36226 - memch->bv_len     miscalculation and slapd crash in the saslAuthzTo     processing, resulting in denial of service.

  - bsc#1182419 CVE-2020-36222 - assertion failure in slapd     in the saslAuthzTo validation, resulting in denial of     service.

  - bsc#1182420 CVE-2020-36221 - slapd crashes in the     Certificate Exact Assertion processing, resulting in     denial of service (schema_init.c     serialNumberAndIssuerCheck).

  - bsc#1182418 CVE-2020-36223 - slapd crash in the Values     Return Filter control handling, resulting in denial of     service (double free and out-of-bounds read).

  - bsc#1182279 CVE-2021-27212 - an assertion failure in     slapd can occur in the issuerAndThisUpdateCheck function     via a crafted packet, resulting in a denial of service     (daemon exit) via a short timestamp. This is related to     schema_init.c and checkTime.

This update was imported from the SUSE:SLE-15:Update update project.

According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed     by OpenLDAP's slapd server, to trigger an assertion failure. The highest threat from this vulnerability is     to system availability. (CVE-2020-25709)

  - A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious     packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this     vulnerability is to system availability. (CVE-2020-25710)

  - An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate     Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).
    (CVE-2020-36221)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the     saslAuthzTo validation, resulting in denial of service. (CVE-2020-36222)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter     control handling, resulting in denial of service (double free and out-of-bounds read). (CVE-2020-36223)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the     saslAuthzTo processing, resulting in denial of service. (CVE-2020-36224)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the     saslAuthzTo processing, resulting in denial of service. (CVE-2020-36225)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash     in the saslAuthzTo processing, resulting in denial of service. (CVE-2020-36226)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop     Cancel operation, resulting in denial of service. (CVE-2020-36227)

  - An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate     List Exact Assertion processing, resulting in denial of service. (CVE-2020-36228)

  - A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN     parsing in ad_keystring, resulting in denial of service. (CVE-2020-36229)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN     parsing in decode.c ber_next_element, resulting in denial of service. (CVE-2020-36230)

  - In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the     issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via     a short timestamp. This is related to schema_init.c and checkTime. (CVE-2021-27212)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In OpenLDAP through 2.4.57 and 2.5.x through     2.5.1alpha, an assertion failure in slapd can occur in     the issuerAndThisUpdateCheck function via a crafted     packet, resulting in a denial of service (daemon exit)     via a short timestamp. This is related to schema_init.c     and checkTime.(CVE-2021-27212)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     in an assertion failure in slapd in the X.509 DN     parsing in decode.c ber_next_element, resulting in     denial of service.(CVE-2020-36230)

  - A flaw was discovered in ldap_X509dn2bv in OpenLDAP     before 2.4.57 leading to a slapd crash in the X.509 DN     parsing in ad_keystring, resulting in denial of     service.(CVE-2020-36229)

  - An integer underflow was discovered in OpenLDAP before     2.4.57 leading to a slapd crash in the Certificate List     Exact Assertion processing, resulting in denial of     service.(CVE-2020-36228)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an infinite loop in slapd with the cancel_extop     Cancel operation, resulting in denial of     service.(CVE-2020-36227)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a memch->bv_len miscalculation and slapd crash in     the saslAuthzTo processing, resulting in denial of     service.(CVE-2020-36226)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a double free and slapd crash in the saslAuthzTo     processing, resulting in denial of     service.(CVE-2020-36225)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an invalid pointer free and slapd crash in the     saslAuthzTo processing, resulting in denial of     service.(CVE-2020-36224)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a slapd crash in the Values Return Filter control     handling, resulting in denial of service (double free     and out-of-bounds read).(CVE-2020-36223)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an assertion failure in slapd in the saslAuthzTo     validation, resulting in denial of     service.(CVE-2020-36222)

  - An integer underflow was discovered in OpenLDAP before     2.4.57 leading to slapd crashes in the Certificate     Exact Assertion processing, resulting in denial of     service (schema_init.c     serialNumberAndIssuerCheck).(CVE-2020-36221)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In OpenLDAP through 2.4.57 and 2.5.x through     2.5.1alpha, an assertion failure in slapd can occur in     the issuerAndThisUpdateCheck function via a crafted     packet, resulting in a denial of service (daemon exit)     via a short timestamp. This is related to schema_init.c     and checkTime.(CVE-2021-27212)

  - An integer underflow was discovered in OpenLDAP before     2.4.57 leading to slapd crashes in the Certificate     Exact Assertion processing, resulting in denial of     service (schema_init.c     serialNumberAndIssuerCheck).(CVE-2020-36221)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an assertion failure in slapd in the saslAuthzTo     validation, resulting in denial of     service.(CVE-2020-36222)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a slapd crash in the Values Return Filter control     handling, resulting in denial of service (double free     and out-of-bounds read).(CVE-2020-36223)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an invalid pointer free and slapd crash in the     saslAuthzTo processing, resulting in denial of     service.(CVE-2020-36224)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a double free and slapd crash in the saslAuthzTo     processing, resulting in denial of     service.(CVE-2020-36225)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a memch->bv_len miscalculation and slapd crash in     the saslAuthzTo processing, resulting in denial of     service.(CVE-2020-36226)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an infinite loop in slapd with the cancel_extop     Cancel operation, resulting in denial of     service.(CVE-2020-36227)

  - An integer underflow was discovered in OpenLDAP before     2.4.57 leading to a slapd crash in the Certificate List     Exact Assertion processing, resulting in denial of     service.(CVE-2020-36228)

  - A flaw was discovered in ldap_X509dn2bv in OpenLDAP     before 2.4.57 leading to a slapd crash in the X.509 DN     parsing in ad_keystring, resulting in denial of     service.(CVE-2020-36229)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     in an assertion failure in slapd in the X.509 DN     parsing in decode.c ber_next_element, resulting in     denial of service.(CVE-2020-36230)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:14700-1 advisory.

  - An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate     Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).
    (CVE-2020-36221)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the     saslAuthzTo validation, resulting in denial of service. (CVE-2020-36222)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter     control handling, resulting in denial of service (double free and out-of-bounds read). (CVE-2020-36223)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the     saslAuthzTo processing, resulting in denial of service. (CVE-2020-36224)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the     saslAuthzTo processing, resulting in denial of service. (CVE-2020-36225)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash     in the saslAuthzTo processing, resulting in denial of service. (CVE-2020-36226)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop     Cancel operation, resulting in denial of service. (CVE-2020-36227)

  - An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate     List Exact Assertion processing, resulting in denial of service. (CVE-2020-36228)

  - A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN     parsing in ad_keystring, resulting in denial of service. (CVE-2020-36229)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN     parsing in decode.c ber_next_element, resulting in denial of service. (CVE-2020-36230)

  - In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the     issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via     a short timestamp. This is related to schema_init.c and checkTime. (CVE-2021-27212)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the openldap packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - In OpenLDAP through 2.4.57 and 2.5.x through     2.5.1alpha, an assertion failure in slapd can occur in     the issuerAndThisUpdateCheck function via a crafted     packet, resulting in a denial of service (daemon exit)     via a short timestamp. This is related to schema_init.c     and checkTime.(CVE-2021-27212)

  - An integer underflow was discovered in OpenLDAP before     2.4.57 leading to slapd crashes in the Certificate     Exact Assertion processing, resulting in denial of     service (schema_init.c     serialNumberAndIssuerCheck).(CVE-2020-36221)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an assertion failure in slapd in the saslAuthzTo     validation, resulting in denial of     service.(CVE-2020-36222)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a slapd crash in the Values Return Filter control     handling, resulting in denial of service (double free     and out-of-bounds read).(CVE-2020-36223)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an invalid pointer free and slapd crash in the     saslAuthzTo processing, resulting in denial of     service.(CVE-2020-36224)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a double free and slapd crash in the saslAuthzTo     processing, resulting in denial of     service.(CVE-2020-36225)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a memch->bv_len miscalculation and slapd crash in     the saslAuthzTo processing, resulting in denial of     service.(CVE-2020-36226)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an infinite loop in slapd with the cancel_extop     Cancel operation, resulting in denial of     service.(CVE-2020-36227)

  - An integer underflow was discovered in OpenLDAP before     2.4.57 leading to a slapd crash in the Certificate List     Exact Assertion processing, resulting in denial of     service.(CVE-2020-36228)

  - A flaw was discovered in ldap_X509dn2bv in OpenLDAP     before 2.4.57 leading to a slapd crash in the X.509 DN     parsing in ad_keystring, resulting in denial of     service.(CVE-2020-36229)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     in an assertion failure in slapd in the X.509 DN     parsing in decode.c ber_next_element, resulting in     denial of service.(CVE-2020-36230)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An integer underflow was discovered in OpenLDAP before     2.4.57 leading to slapd crashes in the Certificate     Exact Assertion processing, resulting in denial of     service (schema_init.c     serialNumberAndIssuerCheck).(CVE-2020-36221)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an assertion failure in slapd in the saslAuthzTo     validation, resulting in denial of     service.(CVE-2020-36222)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a slapd crash in the Values Return Filter control     handling, resulting in denial of service (double free     and out-of-bounds read).(CVE-2020-36223)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an invalid pointer free and slapd crash in the     saslAuthzTo processing, resulting in denial of     service.(CVE-2020-36224)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a double free and slapd crash in the saslAuthzTo     processing, resulting in denial of     service.(CVE-2020-36225)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a memch->bv_len miscalculation and slapd crash in     the saslAuthzTo processing, resulting in denial of     service.(CVE-2020-36226)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an infinite loop in slapd with the cancel_extop     Cancel operation, resulting in denial of     service.(CVE-2020-36227)

  - An integer underflow was discovered in OpenLDAP before     2.4.57 leading to a slapd crash in the Certificate List     Exact Assertion processing, resulting in denial of     service.(CVE-2020-36228)

  - A flaw was discovered in ldap_X509dn2bv in OpenLDAP     before 2.4.57 leading to a slapd crash in the X.509 DN     parsing in ad_keystring, resulting in denial of     service.(CVE-2020-36229)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     in an assertion failure in slapd in the X.509 DN     parsing in decode.c ber_next_element, resulting in     denial of service.(CVE-2020-36230)

  - In OpenLDAP through 2.4.57 and 2.5.x through     2.5.1alpha, an assertion failure in slapd can occur in     the issuerAndThisUpdateCheck function via a crafted     packet, resulting in a denial of service (daemon exit)     via a short timestamp. This is related to schema_init.c     and checkTime.(CVE-2021-27212)

  - A flaw was found in OpenLDAP. This flaw allows an     attacker who can send a malicious packet to be     processed by OpenLDAP's slapd server, to trigger an     assertion failure. The highest threat from this     vulnerability is to system     availability.(CVE-2020-25709)

  - A flaw was found in OpenLDAP in versions before 2.4.56.
    This flaw allows an attacker who sends a malicious     packet processed by OpenLDAP to force a failed     assertion in csnNormalize23(). The highest threat from     this vulnerability is to system     availability.(CVE-2020-25710)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of openldap installed on the remote host is prior to 2.4.40-16.36. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1741 advisory.

    An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session     encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain     access that would otherwise be denied via a simple bind for any identity covered in those ACLs. After the     first SASL bind is completed, the sasl_ssf value is retained for all new non-SASL connections. Depending     on the ACL configuration, this can affect different types of operations (searches, modifications, etc.).
    In other words, a successful authorization step completed by one user affects the authorization     requirement for a different user. (CVE-2019-13565)

    An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate     Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).
    (CVE-2020-36221)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the     saslAuthzTo validation, resulting in denial of service. (CVE-2020-36222)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter     control handling, resulting in denial of service (double free and out-of-bounds read). (CVE-2020-36223)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the     saslAuthzTo processing, resulting in denial of service. (CVE-2020-36224)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the     saslAuthzTo processing, resulting in denial of service. (CVE-2020-36225)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash     in the saslAuthzTo processing, resulting in denial of service. (CVE-2020-36226)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop     Cancel operation, resulting in denial of service. (CVE-2020-36227)

    An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate     List Exact Assertion processing, resulting in denial of service. (CVE-2020-36228)

    A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN     parsing in ad_keystring, resulting in denial of service. (CVE-2020-36229)

    A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN     parsing in decode.c ber_next_element, resulting in denial of service. (CVE-2020-36230)

    In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion  ...

    NOTE: https://bugs.openldap.org/show_bug.cgi?id=9454NOTE: trunk:
    https://git.openldap.org/openldap/openldap/-/commit/3539fc33212b528c56b716584f2c2994af7c30b0NOTE: REL_ENG     2.4.x: https://git.openldap.org/openldap/openldap/-/commit/9badb73425a67768c09bcaed1a9c26c684af6c30     (CVE-2021-27212)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the OpenLDAP packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - OpenLDAP An integer underflow was discovered in     OpenLDAP before 2.4.57 leading to a slapd crash in the     Certificate List Exact Assertion processing, resulting     in denial of service.(CVE-2020-36228)

  - OpenLDAP A flaw was discovered in OpenLDAP before     2.4.57 leading to a slapd crash in the Values Return     Filter control handling, resulting in denial of service     (double free and out-of-bounds read).(CVE-2020-36223)

  - OpenLDAP A flaw was discovered in OpenLDAP before     2.4.57 leading to an assertion failure in slapd in the     saslAuthzTo validation, resulting in denial of     service.(CVE-2020-36222)

  - OpenLDAP An integer underflow was discovered in     OpenLDAP before 2.4.57 leading to slapd crashes in the     Certificate Exact Assertion processing, resulting in     denial of service (schema_init.c     serialNumberAndIssuerCheck).(CVE-2020-36221)

  - OpenLDAP A flaw was discovered in OpenLDAP before     2.4.57 leading in an assertion failure in slapd in the     X.509 DN parsing in decode.c ber_next_element,     resulting in denial of service.(CVE-2020-36230)

  - OpenLDAP A flaw was discovered in OpenLDAP before     2.4.57 leading to an invalid pointer free and slapd     crash in the saslAuthzTo processing, resulting in     denial of service.(CVE-2020-36224)

  - OpenLDAP A flaw was discovered in OpenLDAP before     2.4.57 leading to a double free and slapd crash in the     saslAuthzTo processing, resulting in denial of     service.(CVE-2020-36225)

  - OpenLDAP A flaw was discovered in OpenLDAP before     2.4.57 leading to an infinite loop in slapd with the     cancel_extop Cancel operation, resulting in denial of     service.(CVE-2020-36227)

  - OpenLDAP A flaw was discovered in OpenLDAP before     2.4.57 leading to a memch->bv_len miscalculation and     slapd crash in the saslAuthzTo processing, resulting in     denial of service.(CVE-2020-36226)

  - OpenLDAP A flaw was discovered in ldap_X509dn2bv in     OpenLDAP before 2.4.57 leading to a slapd crash in the     X.509 DN parsing in ad_keystring, resulting in denial     of service.(CVE-2020-36229)

  - A NULL pointer dereference was found in OpenLDAP server     and was fixed in openldap 2.4.55, during a request for     renaming RDNs. An unauthenticated attacker could     remotely crash the slapd process by sending a specially     crafted request, causing a Denial of     Service.(CVE-2020-25692)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of openldap installed on the remote host is prior to 2.4.44-25. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2033 advisory.

    An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session     encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain     access that would otherwise be denied via a simple bind for any identity covered in those ACLs. After the     first SASL bind is completed, the sasl_ssf value is retained for all new non-SASL connections. Depending     on the ACL configuration, this can affect different types of operations (searches, modifications, etc.).
    In other words, a successful authorization step completed by one user affects the authorization     requirement for a different user. (CVE-2019-13565)

    An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate     Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).
    (CVE-2020-36221)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the     saslAuthzTo validation, resulting in denial of service. (CVE-2020-36222)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter     control handling, resulting in denial of service (double free and out-of-bounds read). (CVE-2020-36223)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the     saslAuthzTo processing, resulting in denial of service. (CVE-2020-36224)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash     in the saslAuthzTo processing, resulting in denial of service. (CVE-2020-36226)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop     Cancel operation, resulting in denial of service. (CVE-2020-36227)

    An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate     List Exact Assertion processing, resulting in denial of service. (CVE-2020-36228)

    A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN     parsing in ad_keystring, resulting in denial of service. (CVE-2020-36229)

    A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN     parsing in decode.c ber_next_element, resulting in denial of service. (CVE-2020-36230)

    In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion  ...

    NOTE: https://bugs.openldap.org/show_bug.cgi?id=9454NOTE: trunk:
    https://git.openldap.org/openldap/openldap/-/commit/3539fc33212b528c56b716584f2c2994af7c30b0NOTE: REL_ENG     2.4.x: https://git.openldap.org/openldap/openldap/-/commit/9badb73425a67768c09bcaed1a9c26c684af6c30     (CVE-2021-27212)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
204347	Photon OS 4.0: Openldap PHSA-2021-4.0-0008	Nessus	PhotonOS Local Security Checks	2024/7/24	2026/2/24	high
147570	SUSE SLED15 / SLES15 Security Update : openldap2 (SUSE-SU-2021:0723-1)	Nessus	SuSE Local Security Checks	2021/3/10	2026/2/24	high
147794	openSUSE Security Update : openldap2 (openSUSE-2021-408)	Nessus	SuSE Local Security Checks	2021/3/15	2026/2/24	high
156517	EulerOS Virtualization 3.0.2.6 : openldap (EulerOS-SA-2021-2895)	Nessus	Huawei Local Security Checks	2022/1/6	2026/2/24	high
147004	Photon OS 1.0: Openldap PHSA-2021-1.0-0366	Nessus	PhotonOS Local Security Checks	2021/3/3	2026/2/24	high
148597	EulerOS Virtualization 2.9.1 : openldap (EulerOS-SA-2021-1719)	Nessus	Huawei Local Security Checks	2021/4/15	2024/1/4	high
149556	EulerOS 2.0 SP8 : openldap (EulerOS-SA-2021-1881)	Nessus	Huawei Local Security Checks	2021/5/18	2024/1/1	high
150604	SUSE SLES11 Security Update : openldap2 (SUSE-SU-2021:14700-1)	Nessus	SuSE Local Security Checks	2021/6/10	2026/2/24	high
151166	EulerOS Virtualization for ARM 64 3.0.6.0 : openldap (EulerOS-SA-2021-2004)	Nessus	Huawei Local Security Checks	2021/6/30	2023/12/12	high
153293	EulerOS 2.0 SP2 : openldap (EulerOS-SA-2021-2415)	Nessus	Huawei Local Security Checks	2021/9/14	2023/11/30	high
202861	Photon OS 3.0: Openldap PHSA-2021-3.0-0200	Nessus	PhotonOS Local Security Checks	2024/7/22	2026/2/24	high
175093	Amazon Linux AMI : openldap (ALAS-2023-1741)	Nessus	Amazon Linux Local Security Checks	2023/5/4	2026/2/24	high
147030	SUSE SLES12 Security Update : openldap2 (SUSE-SU-2021:0692-1)	Nessus	SuSE Local Security Checks	2021/3/4	2026/2/24	high
147134	SUSE SLES12 Security Update : openldap2 (SUSE-SU-2021:0693-1)	Nessus	SuSE Local Security Checks	2021/3/4	2026/2/24	high
147513	EulerOS Virtualization for ARM 64 3.0.2.0 : OpenLDAP (EulerOS-SA-2021-1394)	Nessus	Huawei Local Security Checks	2021/3/10	2026/2/24	high
148621	EulerOS Virtualization 2.9.0 : openldap (EulerOS-SA-2021-1753)	Nessus	Huawei Local Security Checks	2021/4/15	2024/1/4	high
175021	Amazon Linux 2 : openldap (ALAS-2023-2033)	Nessus	Amazon Linux Local Security Checks	2023/5/2	2026/2/24	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high