Ubuntu 20.10 USN-4724-1 Critical: OpenLDAP Denial Of Service

ubuntu

February 8, 2021

Several security issues were fixed in OpenLDAP.

Summary

Several security issues were fixed in OpenLDAP.

Software Description:

- openldap: Lightweight Directory Access Protocol

Details:

It was discovered that OpenLDAP incorrectly handled Certificate Exact

Assertion processing. A remote attacker could possibly use this issue to

cause OpenLDAP to crash, resulting in a denial of service. (CVE-2020-36221)

It was discovered that OpenLDAP incorrectly handled saslAuthzTo processing.

A remote attacker could use this issue to cause OpenLDAP to crash,

resulting in a denial of service, or possibly execute arbitrary code.

(CVE-2020-36222, CVE-2020-36224, CVE-2020-36225, CVE-2020-36226)

It was discovered that OpenLDAP incorrectly handled Return Filter control

handling. A remote attacker could use this issue to cause OpenLDAP to

crash, resulting in a denial of service, or possibly execute arbitrary

code. (CVE-2020-36223)

It was discovered that OpenLDAP incorrectly handled certain cancel

operations. A remote attacker could ...

Read the Full Advisory

Topics Covered

security advisory denial of service critical issue security issue update critical software update Ubuntu openldap OpenLDAP ubuntu security notice

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.10:
  slapd                           2.4.53+dfsg-1ubuntu1.3

Ubuntu 20.04 LTS:
  slapd                           2.4.49+dfsg-2ubuntu1.6

Ubuntu 18.04 LTS:
  slapd                           2.4.45+dfsg-1ubuntu1.9

Ubuntu 16.04 LTS:
  slapd                           2.4.42+dfsg-2ubuntu3.12

In general, a standard system update will make all the necessary changes.