The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1777393215 advisory.

  - An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session     encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain     access that would otherwise be denied via a simple bind for any identity covered in those ACLs. After the     first SASL bind is completed, the sasl_ssf value is retained for all new non-SASL connections. Depending     on the ACL configuration, this can affect different types of operations (searches, modifications, etc.).
    In other words, a successful authorization step completed by one user affects the authorization     requirement for a different user. (CVE-2019-13565)

  - In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can     result in denial of service (daemon crash). (CVE-2020-12243)

  - A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request     for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a     specially crafted request, causing a Denial of Service. (CVE-2020-25692)

  - A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed     by OpenLDAP's slapd server, to trigger an assertion failure. The highest threat from this vulnerability is     to system availability. (CVE-2020-25709)

  - A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious     packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this     vulnerability is to system availability. (CVE-2020-25710)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in OpenLDAP. This flaw allows an     attacker who can send a malicious packet to be     processed by OpenLDAP's slapd server, to trigger an     assertion failure. The highest threat from this     vulnerability is to system     availability.(CVE-2020-25709)

  - A flaw was found in OpenLDAP in versions before 2.4.56.
    This flaw allows an attacker who sends a malicious     packet processed by OpenLDAP to force a failed     assertion in csnNormalize23(). The highest threat from     this vulnerability is to system     availability.(CVE-2020-25710)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4634-1 advisory.

    It was discovered that OpenLDAP incorrectly handled certain malformed inputs. A remote attacker could     possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for openldap2 fixes the following issues :

Security issues fixed :

CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909).

CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909).

Non-security issue fixed :

Retry binds in the LDAP backend when the remote LDAP server disconnected the (idle) LDAP connection. (bsc#1179503)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for openldap2 fixes the following issues :

Security issues fixed :

  - CVE-2020-25709: Fixed a crash caused by specially     crafted network traffic (bsc#1178909).

  - CVE-2020-25710: Fixed a crash caused by specially     crafted network traffic (bsc#1178909).

Non-security issue fixed :

  - Retry binds in the LDAP backend when the remote LDAP     server disconnected the (idle) LDAP connection.
    (bsc#1179503)

This update was imported from the SUSE:SLE-15:Update update project.

Two vulnerabilities in the certificate list syntax verification and in the handling of CSN normalization were discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. An unauthenticated remote attacker can take advantage of these flaws to cause a denial of service (slapd daemon crash) via specially crafted packets.

For Debian 9 stretch, these problems have been fixed in version 2.4.44+dfsg-5+deb9u6.

We recommend that you upgrade your openldap packages.

For the detailed security status of openldap please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/openldap

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of openldap installed on the remote host is prior to 2.4.44-23. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1770 advisory.

    A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed     by OpenLDAP's slapd server, to trigger an assertion failure. The highest threat from this vulnerability is     to system availability. (CVE-2020-25709)

    A flaw was found in OpenLDAP. This flaw allows an attacker who sends a malicious packet processed by     OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to     system availability. (CVE-2020-25710)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 6.0.2.6. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.0.2.6 advisory.

  - CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw     V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists. (CVE-2022-23307)

  - By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the     values to be inserted are converters from PatternLayout. The message converter, %m, is likely to always be     included. This allows attackers to manipulate the SQL by entering crafted strings into input fields or     headers of an application that are logged allowing unintended SQL queries to be executed. Note this issue     only affects Log4j 1.x when specifically configured to use the JDBCAppender, which is not the default.
    Beginning in version 2.0-beta8, the JDBCAppender was re-introduced with proper support for parameterized     SQL queries and further customization over the columns written to in logs. Apache Log4j 1.2 reached end of     life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the     previous versions. (CVE-2022-23305)

  - AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS     extended attributes or tmpfs ACLs), because of a heap-based buffer overflow. (CVE-2021-45417)

  - Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data     which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when     listening to untrusted network traffic for log data. This affects Log4j versions up to 1.2 up to 1.2.17.
    (CVE-2019-17571)

  - Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an     SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent     through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1 (CVE-2020-9488)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
352980	CentOS Linux 8.4 [TuxCare] Security Update: openldap / openldap-clients / openldap-devel / openldap-servers Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1777393215)	Nessus	CentOS Local Security Checks	2026/9/30	2026/9/30	high
153065	EulerOS 2.0 SP5 : openldap (EulerOS-SA-2021-2342)	Nessus	Huawei Local Security Checks	2021/9/7	2021/9/9	high
142966	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : OpenLDAP vulnerabilities (USN-4634-1)	Nessus	Ubuntu Local Security Checks	2020/11/17	2024/8/27	high
145026	SUSE SLED15 / SLES15 Security Update : openldap2 (SUSE-SU-2021:0129-1)	Nessus	SuSE Local Security Checks	2021/1/15	2021/4/20	high
145370	openSUSE Security Update : openldap2 (openSUSE-2021-102)	Nessus	SuSE Local Security Checks	2021/1/25	2021/4/20	high
143518	Debian DLA-2481-1 : openldap security update	Nessus	Debian Local Security Checks	2020/12/7	2021/4/20	high
159556	Amazon Linux 2 : openldap (ALAS-2022-1770)	Nessus	Amazon Linux Local Security Checks	2022/4/6	2024/12/11	high
164607	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.0.2.6)	Nessus	Misc.	2022/9/1	2026/8/15	critical

偵測

搜尋 Plugin

high

high

high

high

high

high

high

critical