CVE-2020-36222

Several vulnerabilities were discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol An unauthenticated remote attacker can take advantage of these flaws to cause a denial of service (slapd daemon crash, infinite loops) via specially crafted packets For the stable distribution (buster), these problems have been ...

An issue was discovered in OpenLDAP 2x before 2448 When using SASL authentication and session encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain access that would otherwise be denied via a simple bind for any identity covered in those ACLs After the first SASL bind is completed, the sasl_ssf ...

An issue was discovered in OpenLDAP 2x before 2448 When using SASL authentication and session encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain access that would otherwise be denied via a simple bind for any identity covered in those ACLs After the first SASL bind is completed, the sasl_ssf ...

A flaw was discovered in OpenLDAP before 2457 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service ...