According to the versions of the compat-openldap package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the     experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an     LDAP search operation when the search filter is processed, due to a lack of proper escaping.
    (CVE-2022-29155)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the     experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an     LDAP search operation when the search filter is processed, due to a lack of proper escaping.
    (CVE-2022-29155)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the     experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an     LDAP search operation when the search filter is processed, due to a lack of proper escaping.
    (CVE-2022-29155)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of openldap installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-29155 advisory.

  - In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the     experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an     LDAP search operation when the search filter is processed, due to a lack of proper escaping.
    (CVE-2022-29155)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the openldap package has been released.

The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5140 advisory.

  - In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the     experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an     LDAP search operation when the search filter is processed, due to a lack of proper escaping.
    (CVE-2022-29155)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of openldap installed on the remote host is prior to 2.4.44-23. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-1958 advisory.

    In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the     experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an     LDAP search operation when the search filter is processed, due to a lack of proper escaping.
    (CVE-2022-29155)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of openldap installed on the remote host is prior to 2.4.40-16.32. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1691 advisory.

    In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the     experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an     LDAP search operation when the search filter is processed, due to a lack of proper escaping.
    (CVE-2022-29155)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed     by OpenLDAP's slapd server, to trigger an assertion failure. The highest threat from this vulnerability is     to system availability. (CVE-2020-25709)

  - A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious     packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this     vulnerability is to system availability. (CVE-2020-25710)

  - In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the     experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an     LDAP search operation when the search filter is processed, due to a lack of proper escaping.
    (CVE-2022-29155)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
162352	EulerOS 2.0 SP5 : compat-openldap (EulerOS-SA-2022-1885)	Nessus	Huawei Local Security Checks	2022/6/17	2023/10/20	critical
162891	EulerOS 2.0 SP9 : openldap (EulerOS-SA-2022-2005)	Nessus	Huawei Local Security Checks	2022/7/8	2023/10/18	critical
163549	EulerOS 2.0 SP10 : openldap (EulerOS-SA-2022-2141)	Nessus	Huawei Local Security Checks	2022/7/29	2023/10/17	critical
165343	EulerOS Virtualization 2.9.1 : openldap (EulerOS-SA-2022-2358)	Nessus	Huawei Local Security Checks	2022/9/23	2023/10/11	critical
166642	EulerOS 2.0 SP3 : openldap (EulerOS-SA-2022-2628)	Nessus	Huawei Local Security Checks	2022/10/27	2023/10/6	critical
173494	CBL Mariner 2.0 Security Update: openldap (CVE-2022-29155)	Nessus	MarinerOS Local Security Checks	2023/3/28	2023/8/29	critical
162918	EulerOS 2.0 SP9 : openldap (EulerOS-SA-2022-1975)	Nessus	Huawei Local Security Checks	2022/7/8	2023/10/18	critical
163129	EulerOS Virtualization 2.10.0 : openldap (EulerOS-SA-2022-2096)	Nessus	Huawei Local Security Checks	2022/7/14	2023/10/18	critical
163153	EulerOS Virtualization 2.10.1 : openldap (EulerOS-SA-2022-2116)	Nessus	Huawei Local Security Checks	2022/7/14	2023/10/18	critical
165384	EulerOS Virtualization 2.9.0 : openldap (EulerOS-SA-2022-2394)	Nessus	Huawei Local Security Checks	2022/9/23	2023/10/11	critical
203409	Photon OS 4.0: Openldap PHSA-2022-4.0-0188	Nessus	PhotonOS Local Security Checks	2024/7/23	2024/7/23	critical
161404	Debian DSA-5140-1 : openldap - security update	Nessus	Debian Local Security Checks	2022/5/20	2023/10/26	critical
165937	EulerOS Virtualization 3.0.6.0 : openldap (EulerOS-SA-2022-2577)	Nessus	Huawei Local Security Checks	2022/10/10	2023/10/10	critical
171833	Amazon Linux 2 : openldap (ALAS-2023-1958)	Nessus	Amazon Linux Local Security Checks	2023/2/23	2024/12/11	critical
171865	Amazon Linux AMI : openldap (ALAS-2023-1691)	Nessus	Amazon Linux Local Security Checks	2023/2/23	2024/12/11	critical
170830	EulerOS Virtualization 3.0.2.2 : openldap (EulerOS-SA-2023-1280)	Nessus	Huawei Local Security Checks	2023/1/30	2023/9/5	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical