Summary
It was discovered that OpenLDAP was not properly performing bounds checks
when executing functions related to LDAP URLs. An attacker could possibly
use this issue to cause a denial of service.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | openldap | 2.4.31-1+nmu2ubuntu8.5+esm6 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | openldap | 2.4.42+dfsg-2ubuntu3.13+esm2 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | openldap | 2.4.45+dfsg-1ubuntu1.11+esm1 |
Vulnerabilities 1
-
High 7.5
A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() functio…
References
-
report
https://ubuntu.com/security/CVE-2023-2953