Overview
Affected versions of this package are vulnerable to RHSA-2020:4041. OpenLDAP is an open-source suite of Lightweight Directory Access Protocol (LDAP) applications and development tools. LDAP is a set of protocols used to access and maintain distributed directory information services over an IP network. The openldap packages contain configuration files, libraries, and documentation for OpenLDAP. Security Fix(es): * openldap: denial of service via nested boolean expressions in LDAP search filters (CVE-2020-12243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes linked from the References section.
Remediation
Upgrade openldap to version or higher.
References
- CVE
- RHSA-2020:4041
- Snyk ID
- SNYK-CENTOS7-OPENLDAP-1015086
- Published
- 01 Oct, 2020