A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.
Se encontró un fallo en OpenLDAP. Este fallo permite a un atacante que puede enviar un paquete malicioso a ser procesado por el servidor slapd de OpenLDAP, para desencadenar un fallo de aserción. La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
AV:N/AC:L/Au:N/C:N/I:N/A:P
| Access Vector | NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-617
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| openldap | openldap | * | <built-in method update of dict object at 0x72a9b0e0e440> | Application |
| debian | debian_linux | 9.0 | <built-in method update of dict object at 0x72a9cc55f440> | Operating System |
| debian | debian_linux | 10.0 | <built-in method update of dict object at 0x72a9b0e0e740> | Operating System |
| apple | mac_os_x | * | <built-in method update of dict object at 0x72a9b0e0eec0> | Operating System |
| apple | mac_os_x | * | <built-in method update of dict object at 0x72a9b0e0ec80> | Operating System |
| apple | mac_os_x | 10.14.6 | <built-in method update of dict object at 0x72a9cc55d080> | Operating System |
| apple | mac_os_x | 10.14.6 | <built-in method update of dict object at 0x72a9cc52f880> | Operating System |
| apple | mac_os_x | 10.14.6 | <built-in method update of dict object at 0x72a9b0e0f6c0> | Operating System |
| apple | mac_os_x | 10.14.6 | <built-in method update of dict object at 0x72a9cc55f9c0> | Operating System |
| apple | mac_os_x | 10.14.6 | <built-in method update of dict object at 0x72a9b0e0e600> | Operating System |
| apple | mac_os_x | 10.14.6 | <built-in method update of dict object at 0x72a9b0e0f1c0> | Operating System |
| apple | mac_os_x | 10.14.6 | <built-in method update of dict object at 0x72a9b0e0f600> | Operating System |
| apple | mac_os_x | 10.14.6 | <built-in method update of dict object at 0x72a9cdf01e80> | Operating System |
| apple | mac_os_x | 10.14.6 | <built-in method update of dict object at 0x72a9cc747640> | Operating System |
| apple | mac_os_x | 10.14.6 | <built-in method update of dict object at 0x72a9b0e0e580> | Operating System |
| apple | mac_os_x | 10.14.6 | <built-in method update of dict object at 0x72a9cc55fa40> | Operating System |
| apple | mac_os_x | 10.14.6 | <built-in method update of dict object at 0x72a9cc55f700> | Operating System |
| apple | mac_os_x | 10.15.7 | <built-in method update of dict object at 0x72a9b0ca4140> | Operating System |
| apple | mac_os_x | 10.15.7 | <built-in method update of dict object at 0x72a9b0d01ac0> | Operating System |
| apple | mac_os_x | 10.15.7 | <built-in method update of dict object at 0x72a9cdf01d80> | Operating System |
| apple | mac_os_x | 10.15.7 | <built-in method update of dict object at 0x72a9cc55c5c0> | Operating System |
| apple | macos | * | <built-in method update of dict object at 0x72a9cc55f340> | Operating System |
| redhat | jboss_core_services | - | <built-in method update of dict object at 0x72a9b0ca6fc0> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-005:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-007:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:redhat:jboss_core_services:-:*:*:*:*:*:*:* |