Stay Secure with the Latest Linux Advisories

security advisoryremote exploitOpenLDAP

Mageia 7: 2020-0407 Moderate: OpenLDAP Denial of Service Risk

A vulnerability in the handling of normalization with modrdn was discovered in OpenLDAP. An unauthenticated remote attacker can use this flaw to cause a denial of service (slapd daemon crash) via a specially crafted packet (CVE-2020-25692). . MGASA-2020-0407 - Updated openldap packages fix a security vulnerability Publication date: 10 Nov 2020 URL: https://advisories.mageia.org/MGASA-2020-0407.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-25692 A vulnerability in the handling of normalization with modrdn was discovered in OpenLDAP. An unauthenticated remote attacker can use this flaw to cause a denial of service (slapd daemon crash) via a specially crafted packet (CVE-2020-25692). Also, the PID file path in the systemd service was fixed to use /run as the$ parent, rather than /var/run, eliminating warning messages in the logs. References: - https://bugs.mageia.org/show_bug.cgi?id=26768 - https://bugs.openldap.org/show_bug.cgi?id=9370 - https://lists.debian.org/debian-security-announce/2020/msg00189.html - https://www.cve.org/CVERecord?id=CVE-2020-25692 SRPMS: - 7/core/openldap-2.4.50-1.2.mga7 . A security bulletin has been issued for recent Mageia updates regarding OpenLDAP, addressing a significant denial of service vulnerability associated with the slapd daemon.. OpenLDAP Security Update, Mageia 7 Advisory, Denial of Service, Normalization Vulnerability. . LinuxSecurity.com Team

Nov 10, 2020 Mageia