This update for openldap2 fixes the following issues :

bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509 SAN's falling back to CN validation in violation of rfc6125.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

このopenldap2の更新では、次の問題が修正されます：

  - bsc#1174154 - CVE-2020-15719 - これにより、x509 SANがrfc6125に違反してCN検証に戻る問題が解決されます。

この更新はSUSEからインポートされました：SLE-15: 更新プロジェクトを更新します。

このopenldap2の更新では、次の問題が修正されます：

bsc#1174154 - CVE-2020-15719 - これにより、x509 SANがrfc6125に違反してCN検証に戻る問題が解決されます。

注意：Tenable Network Securityは、前述の記述ブロックをSUSEセキュリティアドバイザリから直接抽出しています。Tenableでは、そこに新しい問題を追加することはせずに、できる限り自動的に整理と書式設定をするようにしています。

This update for openldap2 fixes the following issues :

  - bsc#1174154 - CVE-2020-15719 - This resolves an issue     with x509 SAN's falling back to CN validation in     violation of rfc6125.

This update was imported from the SUSE:SLE-15:Update update project.

According to the version of the openldap packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - libldap in certain third-party OpenLDAP packages has a     certificate-validation flaw when the third-party     package is asserting RFC6125 support. It considers CN     even when there is a non-matching subjectAltName (SAN).
    This is fixed in, for example, openldap-2.4.46-10.el8     in Red Hat Enterprise Linux.(CVE-2020-15719)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 当某些第三方 OpenLDAP 程序包断言 RFC6125 支持时，其中的 libldap 存在证书验证缺陷。即使存在不匹配的 subjectAltName (SAN)，它也会考虑 CN。此问题已在（例如）Red Hat Enterprise Linux 的 openldap-2.4.46-10.el8 中修复。 (CVE-2020-15719)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 當第三方套件宣告 RFC6125 支援時，特定第三方 OpenLDAP 套件中的 libldap 有一個憑證驗證缺陷。即使存在不相符的 subjectAltName (SAN)，它也會考量 CN。例如，此問題已在 Red Hat Enterprise Linux 的 openldap-2.4.46-10.el8 中修正。 (CVE-2020-15719)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 特定のサードパーティ OpenLDAP パッケージの libldap には、サードパーティパッケージがサポートをアサートするとき RFC6125 証明書検証の欠陥があります。一致しない subjectAltName（SAN）がある場合でも、CN が考慮されます。これは、たとえば Red Hat Enterprise Linux の openldap-2.4.46-10.el8 では修正されています。 （CVE-2020-15719）

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

According to the version of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - libldap in certain third-party OpenLDAP packages has a     certificate-validation flaw when the third-party     package is asserting RFC6125 support. It considers CN     even when there is a non-matching subjectAltName (SAN).
    This is fixed in, for example, openldap-2.4.46-10.el8     in Red Hat Enterprise Linux.(CVE-2020-15719)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A NULL pointer dereference was found in OpenLDAP server     and was fixed in openldap 2.4.55, during a request for     renaming RDNs. An unauthenticated attacker could     remotely crash the slapd process by sending a specially     crafted request, causing a Denial of     Service.(CVE-2020-25692)

  - libldap in certain third-party OpenLDAP packages has a     certificate-validation flaw when the third-party     package is asserting RFC6125 support. It considers CN     even when there is a non-matching subjectAltName (SAN).
    This is fixed in, for example, openldap-2.4.46-10.el8     in Red Hat Enterprise Linux.(CVE-2020-15719)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party     package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName     (SAN). This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat Enterprise Linux. (CVE-2020-15719)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
140479	SUSE SLED15 / SLES15 Security Update : openldap2 (SUSE-SU-2020:2581-1)	Nessus	SuSE Local Security Checks	2020/9/10	2021/1/13	medium
140572	openSUSEセキュリティ更新プログラム：openldap2（openSUSE-2020-1416）	Nessus	SuSE Local Security Checks	2020/9/14	2024/2/20	medium
140479	SUSE SLED15 / SLES15セキュリティ更新プログラム：openldap2（SUSE-SU-2020:2581-1）	Nessus	SuSE Local Security Checks	2020/9/10	2021/1/13	medium
140572	openSUSE Security Update : openldap2 (openSUSE-2020-1416)	Nessus	SuSE Local Security Checks	2020/9/14	2024/2/20	medium
140971	EulerOS Virtualization for ARM 64 3.0.6.0 : openldap (EulerOS-SA-2020-2023)	Nessus	Huawei Local Security Checks	2020/9/29	2024/2/19	medium
223399	Linux Distros 未修补的漏洞: CVE-2020-15719	Nessus	Misc.	2025/3/4	2025/9/5	medium
223399	Linux Distros 未修補弱點：CVE-2020-15719	Nessus	Misc.	2025/3/4	2025/9/5	medium
140687	openSUSEセキュリティ更新プログラム：openldap2（openSUSE-2020-1459）	Nessus	SuSE Local Security Checks	2020/9/21	2024/2/20	medium
223399	Linux Distros のパッチ未適用の脆弱性: CVE-2020-15719	Nessus	Misc.	2025/3/4	2025/9/5	medium
139975	EulerOS 2.0 SP8 : openldap (EulerOS-SA-2020-1872)	Nessus	Huawei Local Security Checks	2020/8/28	2024/2/22	medium
140687	openSUSE Security Update : openldap2 (openSUSE-2020-1459)	Nessus	SuSE Local Security Checks	2020/9/21	2024/2/20	medium
147522	EulerOS Virtualization 2.9.1 : openldap (EulerOS-SA-2021-1618)	Nessus	Huawei Local Security Checks	2021/3/10	2021/4/20	medium
223399	Linux Distros Unpatched Vulnerability : CVE-2020-15719	Nessus	Misc.	2025/3/4	2025/9/5	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium