CVE-2020-12243

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2020-05/msg00016.html · Mailing List
• bugs.openldap.org/show_bug.cgi · Exploit
• git.openldap.org/openldap/openldap/-/blob/OPENLDAP_REL_ENG_2_4/CHANGES · Release Notes
• git.openldap.org/openldap/openldap/-/commit/98464c11df8247d6a11b52e294ba5dd4f0380440 · Patch
• lists.debian.org/debian-lts-announce/2020/05/msg00001.html · Mailing List
• security.netapp.com/advisory/ntap-20200511-0003 · Third Party Advisory
• support.apple.com/kb/HT211289 · Third Party Advisory
• usn.ubuntu.com/4352-1 · Third Party Advisory
• usn.ubuntu.com/4352-2 · Third Party Advisory
• debian.org/security/2020/dsa-4666 · Third Party Advisory
• oracle.com/security-alerts/cpuapr2022.html · Third Party Advisory

openldap のその他の脆弱性

• CVE-2023-2953高 7.5A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.
• CVE-2022-29155緊急 9.8In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, vi…
• CVE-2020-25710高 7.5A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to f…
• CVE-2020-25709高 7.5A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to tr…
• CVE-2021-27212高 7.5In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function vi…