Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 62

Export CSV
CVE-2020-15719

openldap: Certificate validation incorrectly matches name against CN-ID

libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName (SAN). This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat Enterprise Linux.

CVSS 3.1 · 4.2 Medium EPSS 2.5% KEV · Not listed
Vendors
Mcafee Openldap Opensuse and 2 more
Products
Policy Auditor Openldap Leap and 2 more
CVE-2014-8182

openldap: crash in ldap_domain2hostlist when processing SRV records

An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS responses.

CVSS 3.1 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Debian Openldap Redhat
Products
Debian Linux Openldap Enterprise Linux