USN-4622-2: OpenLDAP vulnerability
11 November 2020
OpenLDAP could be made to crash or run programs if it received specially crafted network traffic.
- openldap - Lightweight Directory Access Protocol
USN-4622-1 fixed a vulnerability in OpenLDAP. This update provides
the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.
Original advisory details:
It was discovered that OpenLDAP incorrectly handled certain network
packets. A remote attacker could use this issue to cause OpenLDAP to crash,
resulting in a denial of service, or possibly execute arbitrary code.
- USN-4622-1: libldap2-dev, libldap-common, slapd-contrib, slapi-dev, libldap-2.4-2, ldap-utils, openldap, slapd, slapd-smbk5pwd