Description
slapd in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows local users to overwrite arbitrary files via a race condition during the creation of a log file for rejected replication requests.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.0 | openldap2 | 2.0.23-6.3 | DSA-227 |
Advisories 1
- DSA-227 openldap2 - buffer overflows and other bugs Debian Security (DSA / DLA) · Mar 9, 2026
References
- openldap-acl-slapd-bo(11288) vdb-entry
- RHSA-2003:040 vendor-advisory
- SuSE-SA:2002:047 vendor-advisory
- MDKSA-2003:006 vendor-advisory
- DSA-227 vendor-advisory