USN-4622-1: OpenLDAP vulnerability
09 November 2020
OpenLDAP could be made to crash or run programs if it received specially crafted network traffic.
- openldap - Lightweight Directory Access Protocol
It was discovered that OpenLDAP incorrectly handled certain network
packets. A remote attacker could use this issue to cause OpenLDAP to crash,
resulting in a denial of service, or possibly execute arbitrary code.
The problem can be corrected by updating your system to the following package versions:
In general, a standard system update will make all the necessary changes.
- USN-4622-2: libldap-2.4-2, ldap-utils, libldap2-dev, slapd, openldap, slapd-smbk5pwd