It was discovered that OpenLDAP incorrectly handled rootDN delegation. A database administrator could use this issue to request authorization as an identity from another database, contrary to expectations. (CVE-2019-13057)
It was discovered that OpenLDAP incorrectly handled SASL authentication and session encryption. After a first SASL bind was completed, it was possible to obtain access by performing simple binds, contrary to expectations. (CVE-2019-13565)
{ "availability": "No subscription required", "binaries": [ { "binary_version": "2.4.42+dfsg-2ubuntu3.6", "binary_name": "ldap-utils" }, { "binary_version": "2.4.42+dfsg-2ubuntu3.6", "binary_name": "ldap-utils-dbgsym" }, { "binary_version": "2.4.42+dfsg-2ubuntu3.6", "binary_name": "libldap-2.4-2" }, { "binary_version": "2.4.42+dfsg-2ubuntu3.6", "binary_name": "libldap-2.4-2-dbg" }, { "binary_version": "2.4.42+dfsg-2ubuntu3.6", "binary_name": "libldap-2.4-2-dbgsym" }, { "binary_version": "2.4.42+dfsg-2ubuntu3.6", "binary_name": "libldap2-dev" }, { "binary_version": "2.4.42+dfsg-2ubuntu3.6", "binary_name": "libldap2-dev-dbgsym" }, { "binary_version": "2.4.42+dfsg-2ubuntu3.6", "binary_name": "slapd" }, { "binary_version": "2.4.42+dfsg-2ubuntu3.6", "binary_name": "slapd-dbg" }, { "binary_version": "2.4.42+dfsg-2ubuntu3.6", "binary_name": "slapd-dbgsym" }, { "binary_version": "2.4.42+dfsg-2ubuntu3.6", "binary_name": "slapd-smbk5pwd" }, { "binary_version": "2.4.42+dfsg-2ubuntu3.6", "binary_name": "slapd-smbk5pwd-dbgsym" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "2.4.45+dfsg-1ubuntu1.3", "binary_name": "ldap-utils" }, { "binary_version": "2.4.45+dfsg-1ubuntu1.3", "binary_name": "ldap-utils-dbgsym" }, { "binary_version": "2.4.45+dfsg-1ubuntu1.3", "binary_name": "libldap-2.4-2" }, { "binary_version": "2.4.45+dfsg-1ubuntu1.3", "binary_name": "libldap-2.4-2-dbgsym" }, { "binary_version": "2.4.45+dfsg-1ubuntu1.3", "binary_name": "libldap-common" }, { "binary_version": "2.4.45+dfsg-1ubuntu1.3", "binary_name": "libldap2-dev" }, { "binary_version": "2.4.45+dfsg-1ubuntu1.3", "binary_name": "slapd" }, { "binary_version": "2.4.45+dfsg-1ubuntu1.3", "binary_name": "slapd-dbgsym" }, { "binary_version": "2.4.45+dfsg-1ubuntu1.3", "binary_name": "slapd-smbk5pwd" }, { "binary_version": "2.4.45+dfsg-1ubuntu1.3", "binary_name": "slapd-smbk5pwd-dbgsym" } ] }