Medium ELSA-2020-4041 1 CVE

Moderate: openldap security update (Oracle Linux 7)

Published Oct 6, 2020 · Updated Oct 6, 2020

Ecosystem: Oracle Linux

Summary

[2.4.44-22]
- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 7	openldap	0:2.4.44-22.el7
Oracle Linux · 7	openldap-clients	0:2.4.44-22.el7
Oracle Linux · 7	openldap-devel	0:2.4.44-22.el7
Oracle Linux · 7	openldap-servers	0:2.4.44-22.el7
Oracle Linux · 7	openldap-servers-sql	0:2.4.44-22.el7

Vulnerabilities 1

Unscored —

CVE-2020-12243

In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denia…

openldap openldap openldap Debian Ubuntu Alpine

Apr 28, 2020