USN-4622-1: OpenLDAP vulnerability
9 November 2020
OpenLDAP could be made to crash or run programs if it received specially crafted network traffic.
Releases
Packages
- openldap - Lightweight Directory Access Protocol
Details
It was discovered that OpenLDAP incorrectly handled certain network
packets. A remote attacker could use this issue to cause OpenLDAP to crash,
resulting in a denial of service, or possibly execute arbitrary code.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 20.10
Ubuntu 20.04
Ubuntu 18.04
Ubuntu 16.04
In general, a standard system update will make all the necessary changes.
References
Related notices
- USN-4622-2: openldap, slapd-smbk5pwd, ldap-utils, libldap2-dev, slapd, libldap-2.4-2