slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill `cat /pathname`" command, as demonstrated by openldap-initscript.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account,
    which might allow local users to kill arbitrary processes by leveraging access to this non-root account
    for PID file modification before a root script executes a "kill `cat /pathname`" command, as demonstrated
    by openldap-initscript. (CVE-2017-14159)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account,     which might allow local users to kill arbitrary processes by leveraging access to this non-root account     for PID file modification before a root script executes a kill `cat /pathname` command, as demonstrated     by openldap-initscript. (CVE-2017-14159)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account,
    which might allow local users to kill arbitrary processes by leveraging access to this non-root account
    for PID file modification before a root script executes a "kill `cat /pathname`" command, as demonstrated
    by openldap-initscript. (CVE-2017-14159)

  - contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof
    overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote
    attackers to cause a denial of service (slapd crash) via a member MODDN operation. (CVE-2017-17740)

ID	Name	Product	Family	Type	Severity
462550	Echo: openldap: security update to 2.5.13+dfsg-5	Tenable Cloud Security	Echo Local Security Checks	Local	medium
462550	Echo: openldap: security update to 2.5.13+dfsg-5	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
254761	Linux Distros Unpatched Vulnerability : CVE-2017-14159	Nessus	Misc.	Local	medium
424283	Alpine: libldap, multiple openldap packages: security update to 2.4.46-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	high
424283	Alpine: libldap, multiple openldap packages: security update to 2.4.46-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	high

Detections

Analytics

CVE-2017-14159

medium

Tenable Plugins

medium

medium

medium

high

high