Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-2742-1
HistorySep 16, 2015 - 12:00 a.m.

OpenLDAP vulnerabilities

2015-09-1600:00:00
ubuntu.com
35

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

4.9 Medium

AI Score

Confidence

Low

0.947 High

EPSS

Percentile

99.3%

JSON

Releases

  • Ubuntu 15.04
  • Ubuntu 14.04 ESM
  • Ubuntu 12.04

Packages

  • openldap - OpenLDAP utilities

Details

Denis Andzakovic discovered that OpenLDAP incorrectly handled certain BER
data. A remote attacker could possibly use this issue to cause OpenLDAP to
crash, resulting in a denial of service. (CVE-2015-6908)

Dietrich Clauss discovered that the OpenLDAP package incorrectly shipped
with a potentially unsafe default access control configuration. Depending
on how the database is configure, this may allow users to impersonate
others by modifying attributes such as their Unix user and group numbers.
(CVE-2014-9713)

OSVersionArchitecturePackageVersionFilename
Ubuntu15.04noarchslapd< 2.4.31-1+nmu2ubuntu12.3UNKNOWN
Ubuntu15.04noarchldap-utils< 2.4.31-1+nmu2ubuntu12.3UNKNOWN
Ubuntu15.04noarchldap-utils-dbgsym< 2.4.31-1+nmu2ubuntu12.3UNKNOWN
Ubuntu15.04noarchlibldap-2.4-2< 2.4.31-1+nmu2ubuntu12.3UNKNOWN
Ubuntu15.04noarchlibldap-2.4-2-dbg< 2.4.31-1+nmu2ubuntu12.3UNKNOWN
Ubuntu15.04noarchlibldap-2.4-2-dbgsym< 2.4.31-1+nmu2ubuntu12.3UNKNOWN
Ubuntu15.04noarchlibldap2-dev< 2.4.31-1+nmu2ubuntu12.3UNKNOWN
Ubuntu15.04noarchlibldap2-dev-dbgsym< 2.4.31-1+nmu2ubuntu12.3UNKNOWN
Ubuntu15.04noarchslapd-dbg< 2.4.31-1+nmu2ubuntu12.3UNKNOWN
Ubuntu15.04noarchslapd-dbgsym< 2.4.31-1+nmu2ubuntu12.3UNKNOWN
Rows per page:
1-10 of 331

Related

openvas 24
nessus 21
nvd 2
prion 2
cve 2
debiancve 2
ubuntucve 2
cvelist 2
mageia 1
freebsd 1
redhat 1
f5 2
securityvulns 4
amazon 1
debian 5
ibm 7
osv 3
oraclelinux 1
checkpoint_advisories 1
veracode 1
centos 1
archlinux 1
suse 6
openvas
openvas
Ubuntu: Security Advisory (USN-2742-1)
2015-09-17 00:00:00
Mageia: Security Advisory (MGASA-2015-0374)
2015-10-15 00:00:00
Debian Security Advisory DSA 3356-1 (openldap - security update)
2015-09-12 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : OpenLDAP vulnerabilities (USN-2742-1)
2015-09-17 00:00:00
OracleVM 3.3 : openldap (OVMSA-2015-0123)
2015-10-01 00:00:00
RHEL 5 / 6 / 7 : openldap (RHSA-2015:1840)
2015-09-30 00:00:00
nvd
nvd
CVE-2014-9713
2015-04-01 14:59:00
CVE-2015-6908
2015-09-11 16:59:12
prion
prion
Design/Logic Flaw
2015-04-01 14:59:00
Code injection
2015-09-11 16:59:00
cve
cve
CVE-2014-9713
2015-04-01 14:59:00
CVE-2015-6908
2015-09-11 16:59:12
debiancve
debiancve
CVE-2014-9713
2015-04-01 14:59:00
CVE-2015-6908
2015-09-11 16:59:12
ubuntucve
ubuntucve
CVE-2014-9713
2015-04-01 00:00:00
CVE-2015-6908
2015-09-11 00:00:00
cvelist
cvelist
CVE-2014-9713
2015-04-01 14:00:00
CVE-2015-6908
2015-09-11 16:00:00
mageia
mageia
Updated openldap package fixes security vulnerability
2015-09-15 17:55:06
freebsd
freebsd
openldap -- denial of service vulnerability
2015-09-09 00:00:00
redhat
redhat
(RHSA-2015:1840) Important: openldap security update
2015-09-29 09:46:41
f5
f5
K17460 : OpenLDAP vulnerability CVE-2015-6908
2015-10-19 00:00:00
SOL17460 - OpenLDAP vulnerability CVE-2015-6908
2015-10-19 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3356-1] openldap security update
2015-09-14 00:00:00
OpenLDAP DoS
2015-09-14 00:00:00
OpenLDAP multiple security vulnerabilities
2015-04-13 00:00:00
amazon
amazon
Important: openldap, compat-openldap
2015-10-09 16:33:00
debian
debian
[SECURITY] [DSA 3356-1] openldap security update
2015-09-12 05:01:01
[SECURITY] [DLA 309-1] openldap security update
2015-09-14 20:28:48
[SECURITY] [DSA 3356-1] openldap security update
2015-09-12 05:01:01
ibm
ibm
Security Bulletin: IBM Security Access Manager appliances are affected by a vulnerability in OpenLDAP (CVE-2015-6908)
2018-06-16 21:50:47
Security Bulletin: A vulnerability in OpenLDAP affects IBM Tivoli Composite Application Manager for Transactions (CVE-2015-6908)
2018-06-17 15:19:35
Security Bulletin: IBM Security Access Manager appliances are affected by a vulnerability in OpenLDAP (CVE-2015-6908)
2018-07-16 17:29:01
osv
osv
openldap - security update
2015-09-12 00:00:00
openldap - security update
2015-03-30 00:00:00
openldap - security update
2015-04-18 00:00:00
oraclelinux
oraclelinux
openldap security update
2015-09-29 00:00:00
checkpoint_advisories
checkpoint_advisories
OpenLDAP ber_get_next Denial of Service (CVE-2015-6908)
2015-10-07 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:07:44
centos
centos
compat, openldap security update
2015-09-29 13:29:35
archlinux
archlinux
openldap: denial of service
2015-09-12 00:00:00
suse
suse
Security update for openldap2 (important)
2016-01-27 19:12:37
Security update for openldap2 (important)
2016-01-27 11:11:59
Security update for openldap2 (important)
2016-01-27 19:11:56

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

4.9 Medium

AI Score

Confidence

Low

0.947 High

EPSS

Percentile

99.3%

JSON
Related for USN-2742-1
openvas24nessus21nvd2prion2cve2debiancve2ubuntucve2cvelist2mageia1freebsd1redhat1f52securityvulns4amazon1debian5ibm7osv3oraclelinux1checkpoint_advisories1veracode1centos1archlinux1suse6