CVE-2019-13057

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2019-13057
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-13057.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2019-13057
Downstream
Related
Published
2019-07-26T13:15:12Z
Modified
2025-10-15T10:13:29.834269Z
Severity
  • 4.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN (database admin) privileges for certain databases but wants to maintain isolation (e.g., for multi-tenant deployments), slapd does not properly stop a rootDN from requesting authorization as an identity from another database during a SASL bind or with a proxyAuthz (RFC 4370) control. (It is not a common configuration to deploy a system where the server administrator and a DB administrator enjoy different levels of trust.)

References

Affected packages

Git / github.com/openldap/openldap

Affected ranges

Type
GIT
Repo
https://github.com/openldap/openldap
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
1f25fbc9b92823540db460b7618988d3feafbc50

Affected versions

Other

AUTOCONF_2_57
FreeBSD_3_3
LDAP_3_3+prerelease
LDBM_POST_GIANT_RWLOCK
LDBM_PRE_GIANT_RWLOCK
NO_SLAP_OP_BLOCKS
OPENDLAP_REL_ENG_2_2_MP
OPENLDAP_AC_BP
OPENLDAP_REL_ENG_1_0_0
OPENLDAP_REL_ENG_2_1_BP
OPENLDAP_REL_ENG_2_1_MP
OPENLDAP_REL_ENG_2_2_BP
OPENLDAP_REL_ENG_2_2_MP
OPENLDAP_REL_ENG_2_3_BP
OPENLDAP_REL_ENG_2_3_MP
OPENLDAP_REL_ENG_2_4_0ALPHA
OPENLDAP_REL_ENG_2_4_10
OPENLDAP_REL_ENG_2_4_11
OPENLDAP_REL_ENG_2_4_12
OPENLDAP_REL_ENG_2_4_13
OPENLDAP_REL_ENG_2_4_14
OPENLDAP_REL_ENG_2_4_15
OPENLDAP_REL_ENG_2_4_16
OPENLDAP_REL_ENG_2_4_17
OPENLDAP_REL_ENG_2_4_18
OPENLDAP_REL_ENG_2_4_19
OPENLDAP_REL_ENG_2_4_1ALPHA
OPENLDAP_REL_ENG_2_4_20
OPENLDAP_REL_ENG_2_4_21
OPENLDAP_REL_ENG_2_4_22
OPENLDAP_REL_ENG_2_4_23
OPENLDAP_REL_ENG_2_4_24
OPENLDAP_REL_ENG_2_4_25
OPENLDAP_REL_ENG_2_4_26
OPENLDAP_REL_ENG_2_4_27
OPENLDAP_REL_ENG_2_4_28
OPENLDAP_REL_ENG_2_4_29
OPENLDAP_REL_ENG_2_4_2ALPHA
OPENLDAP_REL_ENG_2_4_30
OPENLDAP_REL_ENG_2_4_32
OPENLDAP_REL_ENG_2_4_33
OPENLDAP_REL_ENG_2_4_34
OPENLDAP_REL_ENG_2_4_35
OPENLDAP_REL_ENG_2_4_36
OPENLDAP_REL_ENG_2_4_37
OPENLDAP_REL_ENG_2_4_38
OPENLDAP_REL_ENG_2_4_39
OPENLDAP_REL_ENG_2_4_3ALPHA
OPENLDAP_REL_ENG_2_4_40
OPENLDAP_REL_ENG_2_4_41
OPENLDAP_REL_ENG_2_4_42
OPENLDAP_REL_ENG_2_4_43
OPENLDAP_REL_ENG_2_4_44
OPENLDAP_REL_ENG_2_4_45
OPENLDAP_REL_ENG_2_4_46
OPENLDAP_REL_ENG_2_4_47
OPENLDAP_REL_ENG_2_4_4ALPHA
OPENLDAP_REL_ENG_2_4_5BETA
OPENLDAP_REL_ENG_2_4_6
OPENLDAP_REL_ENG_2_4_7
OPENLDAP_REL_ENG_2_4_8
OPENLDAP_REL_ENG_2_4_9
OPENLDAP_REL_ENG_2_4_BP
OPENLDAP_REL_ENG_2_4_MP
OPENLDAP_REL_ENG_2_BP
OPENLDAP_REL_ENG_2_MP
OPENLDAP_SLAPD_BACK_LDAP
UMICH_LDAP_3_3

LMDB_0.*

LMDB_0.9.15
LMDB_0.9.16
LMDB_0.9.17
LMDB_0.9.18
LMDB_0.9.19
LMDB_0.9.20
LMDB_0.9.21
LMDB_0.9.22
LMDB_0.9.23
LMDB_0.9.24

Database specific

vanir_signatures

[
    {
        "id": "CVE-2019-13057-8d670119",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "file": "libraries/libldap/cyrus.c",
            "function": "ldap_int_sasl_bind"
        },
        "digest": {
            "function_hash": "81063690992040781467550700777675779130",
            "length": 6455.0
        },
        "source": "https://github.com/openldap/openldap/commit/1f25fbc9b92823540db460b7618988d3feafbc50"
    },
    {
        "id": "CVE-2019-13057-93261e78",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "target": {
            "file": "libraries/libldap/cyrus.c"
        },
        "digest": {
            "line_hashes": [
                "312627585656422542698671092433723073376",
                "338667210732090488210469566781984538516",
                "174272373029822939739738495638263106988",
                "73299445739927031031918352608744476866",
                "79328900896938706329537600223240551847",
                "19630966697333832462434547331236633149",
                "215322681832582147462375593403124087236",
                "237705069010983046172293202720829508463",
                "138915725995887299269478284513847673777",
                "102423115331596487121742125187167279873",
                "16320344604405346819738529550927297199",
                "202584951158536821866804847025545586148"
            ],
            "threshold": 0.9
        },
        "source": "https://github.com/openldap/openldap/commit/1f25fbc9b92823540db460b7618988d3feafbc50"
    }
]