USN-4352-2: OpenLDAP vulnerability
6 May 2020
OpenLDAP could be made to crash if it received specially crafted network traffic.
- openldap - Lightweight Directory Access Protocol
USN-4352-1 fixed a vulnerability in OpenLDAP. This update provides
the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.
Original advisory details:
It was discovered that OpenLDAP incorrectly handled certain queries. A
remote attacker could possibly use this issue to cause OpenLDAP to consume
resources, resulting in a denial of service.
- USN-4352-1: slapd-smbk5pwd, libldap2-dev, libldap-common, slapd-contrib, ldap-utils, libldap-2.4-2, openldap, slapd, slapi-dev