Branch c9f2 update bulletin.

Package openldap updated to version 2.4.59-alt0.c9.1 for branch c9f2 in task 283266.

Published: 2021-03-23

BDU:2021-06394

Уязвимость открытой реализации протокола OpenLDAP, связанная с утверждением о достижимости, позволяющая нарушителю выполнить отказ в обслуживании

Severity: HIGH (7.5) Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

CVE-2021-27212

Published: 2021-02-14
Modified: 2024-11-21

CVE-2021-27212

In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.

Severity: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

Version: 2.1.0

Branch c9f2 update on 2021-08-21

ALT-BU-2021-4134-1

ALT-PU-2021-2585-1

Closed vulnerabilities

BDU:2021-06394

CVE-2021-27212