Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

openldap openldap 2.4.16 vulnerabilities and exploits

(subscribe to this query)
409
VMScore
CVE-2011-1024
chain.c in back-ldap in OpenLDAP 2.4.x prior to 2.4.24, when a master-slave configuration with a chain overlay and ppolicy_forward_updates (aka authentication-failure forwarding) is used, allows remote authenticated users to bypass external-program authentication by sending an in...
Openldap Openldap 2.4.10Openldap Openldap 2.4.6Openldap Openldap 2.4.14Openldap Openldap 2.4.15Openldap Openldap 2.4.16Openldap Openldap 2.4.22Openldap Openldap 2.4.12Openldap Openldap 2.4.13Openldap Openldap 2.4.21Openldap Openldap 2.4.23Openldap Openldap 2.4.7Openldap Openldap 2.4.8Openldap Openldap 2.4.17Openldap Openldap 2.4.18Openldap Openldap 2.4.9Openldap Openldap 2.4.11Openldap Openldap 2.4.19Openldap Openldap 2.4.20
605
VMScore
CVE-2011-1025
bind.cpp in back-ndb in OpenLDAP 2.4.x prior to 2.4.24 does not require authentication for the root Distinguished Name (DN), which allows remote malicious users to bypass intended access restrictions via an arbitrary password.
Openldap Openldap 2.4.7Openldap Openldap 2.4.6Openldap Openldap 2.4.15Openldap Openldap 2.4.20Openldap Openldap 2.4.22Openldap Openldap 2.4.8Openldap Openldap 2.4.17Openldap Openldap 2.4.14Openldap Openldap 2.4.13Openldap Openldap 2.4.12Openldap Openldap 2.4.11Openldap Openldap 2.4.21Openldap Openldap 2.4.18Openldap Openldap 2.4.10Openldap Openldap 2.4.9Openldap Openldap 2.4.16Openldap Openldap 2.4.19Openldap Openldap 2.4.23
505
VMScore
CVE-2011-1081
modrdn.c in slapd in OpenLDAP 2.4.x prior to 2.4.24 allows remote malicious users to cause a denial of service (daemon crash) via a relative Distinguished Name (DN) modification request (aka MODRDN operation) that contains an empty value for the OldDN field.
Openldap Openldap 2.4.7Openldap Openldap 2.4.6Openldap Openldap 2.4.14Openldap Openldap 2.4.15Openldap Openldap 2.4.10Openldap Openldap 2.4.22Openldap Openldap 2.4.8Openldap Openldap 2.4.16Openldap Openldap 2.4.17Openldap Openldap 2.4.23Openldap Openldap 2.4.13Openldap Openldap 2.4.12Openldap Openldap 2.4.20Openldap Openldap 2.4.21Openldap Openldap 2.4.11Openldap Openldap 2.4.9Openldap Openldap 2.4.18Openldap Openldap 2.4.19
231
VMScore
CVE-2012-1164
slapd in OpenLDAP prior to 2.4.30 allows remote malicious users to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned.
Openldap Openldap 2.4.24Openldap Openldap 2.4.23Openldap Openldap 2.4.15Openldap Openldap 2.4.14Openldap Openldap 2.4.7Openldap Openldap 2.4.6Openldap OpenldapOpenldap Openldap 2.4.22Openldap Openldap 2.4.21Openldap Openldap 2.4.13Openldap Openldap 2.4.12Openldap Openldap 2.4.26Openldap Openldap 2.4.25Openldap Openldap 2.4.17Openldap Openldap 2.4.16Openldap Openldap 2.4.9Openldap Openldap 2.4.8Openldap Openldap 2.4.28Openldap Openldap 2.4.27Openldap Openldap 2.4.20Openldap Openldap 2.4.19Openldap Openldap 2.4.18
383
VMScore
CVE-2012-2668
libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and previous versions, when using the Mozilla NSS backend, always uses the default cipher suite even when TLSCipherSuite is set, which might cause OpenLDAP to use weaker ciphers than intended and make it easier for remote mal...
Openldap Openldap 2.4.17Openldap Openldap 2.4.6Openldap Openldap 2.4.11Openldap Openldap 2.4.8Openldap Openldap 2.4.26Openldap Openldap 2.4.9Openldap Openldap 2.4.16Openldap OpenldapOpenldap Openldap 2.4.29Openldap Openldap 2.4.22Openldap Openldap 2.4.25Openldap Openldap 2.4.20Openldap Openldap 2.4.15Openldap Openldap 2.4.18Openldap Openldap 2.4.27Openldap Openldap 2.4.7Openldap Openldap 2.4.28Openldap Openldap 2.4.23Openldap Openldap 2.4.24Openldap Openldap 2.4.14Openldap Openldap 2.4.19Openldap Openldap 2.4.12
445
VMScore
CVE-2015-1545
The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 up to and including 2.4.40 allows remote malicious users to cause a denial of service (NULL pointer dereference and crash) via an empty attribute list in a deref control in a search request.
Openldap Openldap 2.4.39Openldap Openldap 2.4.17Openldap Openldap 2.4.37Openldap Openldap 2.4.26Openldap Openldap 2.4.31Openldap Openldap 2.4.40Openldap Openldap 2.4.16Openldap Openldap 2.4.29Openldap Openldap 2.4.32Openldap Openldap 2.4.22Openldap Openldap 2.4.25Openldap Openldap 2.4.20Openldap Openldap 2.4.15Openldap Openldap 2.4.18Openldap Openldap 2.4.27Openldap Openldap 2.4.36Openldap Openldap 2.4.38Openldap Openldap 2.4.28Openldap Openldap 2.4.23Openldap Openldap 2.4.24Openldap Openldap 2.4.34Openldap Openldap 2.4.14
357
VMScore
CVE-2011-4079
Off-by-one error in the UTF8StringNormalize function in OpenLDAP 2.4.26 and previous versions allows remote malicious users to cause a denial of service (slapd crash) via a zero-length string that triggers a heap-based buffer overflow, as demonstrated using an empty postalAddress...
Openldap Openldap 2.0.2Openldap Openldap 2.0.11 11Openldap Openldap 2.1.15Openldap Openldap 2.1.10Openldap Openldap 2.3.5Openldap Openldap 2.2.4Openldap Openldap 2.2.22Openldap Openldap 2.3.31Openldap Openldap 2.3.42Openldap Openldap 2.1.29Openldap Openldap 2.2.18Openldap Openldap 2.1.9Openldap Openldap 1.2.6Openldap Openldap 1.1.2Openldap Openldap 2.0.22Openldap Openldap 2.4.17Openldap Openldap 2.4.6Openldap Openldap 2.0.9Openldap Openldap 2.2.0Openldap Openldap 2.3.32Openldap Openldap 2.1.19Openldap Openldap 1.0
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook