USN-6616-1: OpenLDAP vulnerability

Releases

• Ubuntu 22.04 LTS
• Ubuntu 20.04 LTS

Packages

• openldap - Lightweight Directory Access Protocol

Details

It was discovered that OpenLDAP was not properly performing bounds checks
when executing functions related to LDAP URLs. An attacker could possibly
use this issue to cause a denial of service.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 22.04

• slapd - 2.5.16+dfsg-0ubuntu0.22.04.2

Ubuntu 20.04

• slapd - 2.4.49+dfsg-2ubuntu1.10

In general, a standard system update will make all the necessary changes.

References

• CVE-2023-2953

Related notices

• USN-6197-1: libldap-common, openldap, libldap-2.4-2, slapd, slapd-smbk5pwd, ldap-utils, libldap2-dev