This update for openldap2 fixes the following issues :

  - bsc#1182408 CVE-2020-36230 - an assertion failure in     slapd in the X.509 DN parsing in decode.c     ber_next_element, resulting in denial of service.

  - bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the     X.509 DN parsing in ad_keystring, resulting in denial of     service.

  - bsc#1182412 CVE-2020-36228 - integer underflow leading     to crash in the Certificate List Exact Assertion     processing, resulting in denial of service.

  - bsc#1182413 CVE-2020-36227 - infinite loop in slapd with     the cancel_extop Cancel operation, resulting in denial     of service.

  - bsc#1182416 CVE-2020-36225 - double free and slapd crash     in the saslAuthzTo processing, resulting in denial of     service.

  - bsc#1182417 CVE-2020-36224 - invalid pointer free and     slapd crash in the saslAuthzTo processing, resulting in     denial of service.

  - bsc#1182415 CVE-2020-36226 - memch->bv_len     miscalculation and slapd crash in the saslAuthzTo     processing, resulting in denial of service.

  - bsc#1182419 CVE-2020-36222 - assertion failure in slapd     in the saslAuthzTo validation, resulting in denial of     service.

  - bsc#1182420 CVE-2020-36221 - slapd crashes in the     Certificate Exact Assertion processing, resulting in     denial of service (schema_init.c     serialNumberAndIssuerCheck).

  - bsc#1182418 CVE-2020-36223 - slapd crash in the Values     Return Filter control handling, resulting in denial of     service (double free and out-of-bounds read).

  - bsc#1182279 CVE-2021-27212 - an assertion failure in     slapd can occur in the issuerAndThisUpdateCheck function     via a crafted packet, resulting in a denial of service     (daemon exit) via a short timestamp. This is related to     schema_init.c and checkTime.

This update was imported from the SUSE:SLE-15:Update update project.

Detections

Analytics

openSUSE Security Update : openldap2 (openSUSE-2021-408)

high Nessus Plugin ID 147794

Version 1.4