Skip to content
OpenAdvisories
Medium ALAS2-2020-1539 1 CVE

Moderate: openldap security update (Amazon Linux 2)

Published Oct 22, 2020 · Updated Oct 22, 2020

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-12243: In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash). 1833535: CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters

Fixed packages 6

ReleasePackageFixed in
Amazon Linux · 2 openldap 0:2.4.44-22.amzn2
Amazon Linux · 2 openldap-clients 0:2.4.44-22.amzn2
Amazon Linux · 2 openldap-debuginfo 0:2.4.44-22.amzn2
Amazon Linux · 2 openldap-devel 0:2.4.44-22.amzn2
Amazon Linux · 2 openldap-servers 0:2.4.44-22.amzn2
Amazon Linux · 2 openldap-servers-sql 0:2.4.44-22.amzn2

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2020-12243.html