The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service (slapd crash) by unbinding immediately after a search request, which triggers rwm_conn_destroy to free the session context while it is being used by rwm_op_search.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Openldap | — | Apply Apple macOS Security Update 2019-007 High SierraApply Apple macOS Security Update 2019-002 Mojave | Dec 11, 2019 | Dec 10, 2019 |
| Centos_linux | — | Upgrade openldapUpgrade openldap-develUpgrade openldap-servers-overlaysUpgrade compat-openldapUpgrade openldap-servers-sqlUpgrade openldap-clientsUpgrade openldap-servers | Dec 1, 2016 | Feb 5, 2014 |
| Debian | — | Upgrade openldap | Jul 30, 2024 | Feb 5, 2014 |
| Oracle_linux | — | Upgrade openldap-servers-sqlUpgrade openldap-clientsUpgrade openldap-serversUpgrade openldap-develUpgrade openldap | Oct 16, 2024 | Feb 5, 2014 |
| Suse | — | Upgrade sle-sdk-releaseUpgrade openldap2-back-metaUpgrade openldap2-devel-32bitUpgrade libldap-2_4-2-32bitUpgrade openldap2-back-perlUpgrade libldap-openssl1-2_4-2-x86Upgrade libldap-openssl1-2_4-2-32bitUpgrade openldap2-develUpgrade libldap-openssl1-2_4-2Upgrade openldap2Upgrade libldap-2_4-2Upgrade compat-libldap-2_3-0Upgrade libldap-2_4-2-x86Upgrade openldap2-client | Jun 4, 2015 | Feb 5, 2014 |
| Ubuntu | — | Upgrade slapd | Nov 8, 2024 | Feb 5, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub