Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

openldap openldap 2.1.27 vulnerabilities and exploits

(subscribe to this query)
642
VMScore
CVE-2005-4442
Untrusted search path vulnerability in OpenLDAP prior to 2.2.28-r3 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH.
Openldap Openldap 2.0.13Openldap Openldap 2.0.15Openldap Openldap 2.0.21Openldap Openldap 2.0.23Openldap Openldap 2.0.3Openldap Openldap 2.0.5Openldap Openldap 2.1.12Openldap Openldap 2.1.14Openldap Openldap 2.1.20Openldap Openldap 2.1.22Openldap Openldap 2.1.27Openldap Openldap 2.1.29Openldap Openldap 2.1.8Openldap Openldap 2.2.10Openldap Openldap 2.2.17Openldap Openldap 2.2.19Openldap Openldap 2.2.24Openldap Openldap 2.2.26Openldap Openldap 2.2.9Openldap Openldap 2.0.12Openldap Openldap 2.0.14Openldap Openldap 2.0.16
515
VMScore
CVE-2006-6493
Buffer overflow in the krbv4_ldap_auth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and previous versions, when OpenLDAP is compiled with the --enable-kbind (Kerberos KBIND) option, allows remote malicious users to execute arbitrary code via an LDAP bind request using t...
Openldap Openldap 1.0.3Openldap Openldap 1.1Openldap Openldap 1.1.0Openldap Openldap 1.2.1Openldap Openldap 1.2.10Openldap Openldap 1.2.5Openldap Openldap 1.2.6Openldap Openldap 2.0.11Openldap Openldap 2.0.11 11Openldap Openldap 2.0.16Openldap Openldap 2.0.17Openldap Openldap 2.0.23Openldap Openldap 2.0.24Openldap Openldap 2.0.7Openldap Openldap 2.0.8Openldap Openldap 2.1.15Openldap Openldap 2.1.16Openldap Openldap 2.1.22Openldap Openldap 2.1.23Openldap Openldap 2.1.30Openldap Openldap 2.1.4Openldap Openldap 2.2.0
633
VMScore
CVE-2007-5707
OpenLDAP prior to 2.3.39 allows remote malicious users to cause a denial of service (slapd crash) via an LDAP request with a malformed objectClasses attribute. NOTE: this has been reported as a double free, but the reports are inconsistent.
Openldap Openldap 2.0.2Openldap Openldap 2.0.11 11Openldap Openldap 2.1.15Openldap Openldap 2.1.10Openldap Openldap 2.3.28 2.20061022Openldap Openldap 2.2.4Openldap Openldap 2.2.22Openldap Openldap 2.1.29Openldap Openldap 2.2.18Openldap Openldap 2.1.9Openldap Openldap 1.2.6Openldap Openldap 1.1.2Openldap Openldap 2.0.22Openldap Openldap 2.0.9Openldap Openldap 2.2.0Openldap Openldap 2.1.19Openldap Openldap 1.0Openldap Openldap 2.2.29 Rev 1.134Openldap Openldap 1.2.7Openldap Openldap 2.2.12Openldap Openldap 2.2.20Openldap Openldap 2.0.15
633
VMScore
CVE-2007-5708
slapo-pcache (overlays/pcache.c) in slapd in OpenLDAP prior to 2.3.39, when running as a proxy-caching server, allocates memory using a malloc variant instead of calloc, which prevents an array from being initialized properly and might allow malicious users to cause a denial of s...
Openldap Openldap 1.1.1Openldap Openldap 1.1.3Openldap Openldap 1.2.12Openldap Openldap 1.2.2Openldap Openldap 1.2.7Openldap Openldap 1.2.9Openldap Openldap 2.0.0Openldap Openldap 2.0.11 11sOpenldap Openldap 2.0.12Openldap Openldap 2.0.19Openldap Openldap 2.0.20Openldap Openldap 2.0.25Openldap Openldap 2.0.27Openldap Openldap 2.0.4Openldap Openldap 2.0.9Openldap Openldap 2.1.11Openldap Openldap 2.1.18Openldap Openldap 2.1.2Openldap Openldap 1.2Openldap Openldap 1.2.0Openldap Openldap 1.2.1Openldap Openldap 1.2.10
357
VMScore
CVE-2011-4079
Off-by-one error in the UTF8StringNormalize function in OpenLDAP 2.4.26 and previous versions allows remote malicious users to cause a denial of service (slapd crash) via a zero-length string that triggers a heap-based buffer overflow, as demonstrated using an empty postalAddress...
Openldap Openldap 2.0.2Openldap Openldap 2.0.11 11Openldap Openldap 2.1.15Openldap Openldap 2.1.10Openldap Openldap 2.3.5Openldap Openldap 2.2.4Openldap Openldap 2.2.22Openldap Openldap 2.3.31Openldap Openldap 2.3.42Openldap Openldap 2.1.29Openldap Openldap 2.2.18Openldap Openldap 2.1.9Openldap Openldap 1.2.6Openldap Openldap 1.1.2Openldap Openldap 2.0.22Openldap Openldap 2.4.17Openldap Openldap 2.4.6Openldap Openldap 2.0.9Openldap Openldap 2.2.0Openldap Openldap 2.3.32Openldap Openldap 2.1.19Openldap Openldap 1.0
445
VMScore
CVE-2019-19906
cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.
Cyrusimap Cyrus-saslDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 12.04Fedoraproject Fedora 31Fedoraproject Fedora 32Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Jboss Enterprise Web Server 2.0.0Redhat Enterprise Linux 5.0Redhat Enterprise Linux 8.0Apple Mac Os X 10.14.6Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server Update Services For Sap Solutions 8.4Redhat Enterprise Linux For Power Little Endian 8.0
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook