远程主机上运行的 macOS/Mac OS X 版本为低于 10.14.6 安全更新 2021-004 Mojave 的 10.14.x。因此，该应用程序受到多个漏洞的影响，其中包括：

  远程攻击者也许能够造成意外的应用程序终止或任意代码执行。
    (CVE-2021-30712)

  远程攻击者也许能够造成意外的应用程序终止或任意代码执行。
    (CVE-2021-30678)

  - 应用程序可能以内核权限执行任意代码。(CVE-2021-30704)

请注意，Nessus 并未测试此问题，而是只依靠操作系统自我报告的版本号。

远程主机上安装的 openldap 版本低于 2.4.44-25 版 。因此，如公告 ALAS2-2023-2033 所述，该主机受到多个漏洞的影响。

  - OpenLDAP 2.4.48 之前的 2.x 版的服务器中发现一个问题。当 slapd 访问权限控制中使用了 SASL 身份验证和会话加密，且依靠 SASL 安全层时，通过简单绑定这些 ACL 涵盖的任何身份，就可能会获取本应被拒绝的访问权限。首个 SASL 绑定完成后，sasl_ssf 值会保留给所有新的非 SASL 连接。根据 ACL 配置的不同，此漏洞可能会影响不同类型的操作（搜索、修改等）。
    换言之，一位用户成功完成的授权步骤可能会影响到另一位用户的授权要求。(CVE-2019-13565)

  - 在 OpenLDAP 2.4.57 之前版本中发现整数下溢问题，会导致 slapd 在证书完全断言处理中崩溃，进而导致拒绝服务 (schema_init.c serialNumberAndIssuerCheck)。
    (CVE-2020-36221)

  - 在 OpenLDAP 2.4.57 之前版本中发现一个缺陷，会在 saslAuthzTo 验证中造成 slapd 中发生断言失败，从而导致拒绝服务。(CVE-2020-36222)

  - 在 OpenLDAP 2.4.57 之前版本中发现一个缺陷，会导致值返回过滤器控件处理中发生 slapd 崩溃，从而导致拒绝服务（双重释放和越界读取）。(CVE-2020-36223)

  - 在 OpenLDAP 2.4.57 之前版本中发现一个缺陷，会在 saslAuthzTo 处理中造成无效的指针释放和 slapd 崩溃，从而导致拒绝服务。(CVE-2020-36224)

  - 在 OpenLDAP 2.4.57 之前版本中发现一个缺陷，会在 saslAuthzTo 处理中造成 memch->bv_len 计算错误和 slapd 崩溃，从而导致拒绝服务。(CVE-2020-36226)

  - 在 OpenLDAP 2.4.57 之前版本中发现一个缺陷，可通过 cancel_extop Cancel 操作造成 slapd 中发生无限循环，从而导致拒绝服务。(CVE-2020-36227)

  - 在 OpenLDAP 2.4.57 之前版本中发现整数下溢问题，会导致 slapd 在证书完全断言处理中崩溃，进而导致拒绝服务。(CVE-2020-36228)

  - 在 OpenLDAP 2.4.57 之前版本的 ldap_X509dn2bv 中发现一个缺陷，会在 ad_keystring 中进行 X.509 解析时造成 slapd 崩溃，从而导致拒绝服务。(CVE-2020-36229)

  - 在 OpenLDAP 2.4.57 之前版本中发现一个缺陷，会在 decode.c ber_next_element 中进行 X.509 DN 解析时造成 slapd 发生断言失败，从而导致拒绝服务。(CVE-2020-36230)

  - 在 2.4.57 及之前版本和 2.5.x 到 2.5.1alpha 版本（含）的 OpenLDAP 中，可通过构建的数据包在 issuerAndThisUpdateCheck 函数的 slapd 中造成断言失败，进而通过短时间戳造成拒绝服务（后台程序退出）。这与 schema_init.c 和 checkTime 有关。(CVE-2021-27212)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程主机上安装的 openldap 版本低于 2.4.40-16.36 版 。因此，如公告 ALAS-2023-1741 所述，该主机受到多个漏洞的影响。

  - OpenLDAP 2.4.48 之前的 2.x 版的服务器中发现一个问题。当 slapd 访问权限控制中使用了 SASL 身份验证和会话加密，且依靠 SASL 安全层时，通过简单绑定这些 ACL 涵盖的任何身份，就可能会获取本应被拒绝的访问权限。首个 SASL 绑定完成后，sasl_ssf 值会保留给所有新的非 SASL 连接。根据 ACL 配置的不同，此漏洞可能会影响不同类型的操作（搜索、修改等）。
    换言之，一位用户成功完成的授权步骤可能会影响到另一位用户的授权要求。(CVE-2019-13565)

  - 在 OpenLDAP 2.4.57 之前版本中发现整数下溢问题，会导致 slapd 在证书完全断言处理中崩溃，进而导致拒绝服务 (schema_init.c serialNumberAndIssuerCheck)。
    (CVE-2020-36221)

  - 在 OpenLDAP 2.4.57 之前版本中发现一个缺陷，会在 saslAuthzTo 验证中造成 slapd 中发生断言失败，从而导致拒绝服务。(CVE-2020-36222)

  - 在 OpenLDAP 2.4.57 之前版本中发现一个缺陷，会导致值返回过滤器控件处理中发生 slapd 崩溃，从而导致拒绝服务（双重释放和越界读取）。(CVE-2020-36223)

  - 在 OpenLDAP 2.4.57 之前版本中发现一个缺陷，会在 saslAuthzTo 处理中造成无效的指针释放和 slapd 崩溃，从而导致拒绝服务。(CVE-2020-36224)

  - 在 OpenLDAP 2.4.57 之前版本中发现一个缺陷，会在 saslAuthzTo 处理中造成双重释放和 slapd 崩溃，从而导致拒绝服务。(CVE-2020-36225)

  - 在 OpenLDAP 2.4.57 之前版本中发现一个缺陷，会在 saslAuthzTo 处理中造成 memch->bv_len 计算错误和 slapd 崩溃，从而导致拒绝服务。(CVE-2020-36226)

  - 在 OpenLDAP 2.4.57 之前版本中发现一个缺陷，可通过 cancel_extop Cancel 操作造成 slapd 中发生无限循环，从而导致拒绝服务。(CVE-2020-36227)

  - 在 OpenLDAP 2.4.57 之前版本中发现整数下溢问题，会导致 slapd 在证书完全断言处理中崩溃，进而导致拒绝服务。(CVE-2020-36228)

  - 在 OpenLDAP 2.4.57 之前版本的 ldap_X509dn2bv 中发现一个缺陷，会在 ad_keystring 中进行 X.509 解析时造成 slapd 崩溃，从而导致拒绝服务。(CVE-2020-36229)

  - 在 OpenLDAP 2.4.57 之前版本中发现一个缺陷，会在 decode.c ber_next_element 中进行 X.509 DN 解析时造成 slapd 发生断言失败，从而导致拒绝服务。(CVE-2020-36230)

  - 在 2.4.57 及之前版本和 2.5.x 到 2.5.1alpha 版本（含）的 OpenLDAP 中，可通过构建的数据包在 issuerAndThisUpdateCheck 函数的 slapd 中造成断言失败，进而通过短时间戳造成拒绝服务（后台程序退出）。这与 schema_init.c 和 checkTime 有关。(CVE-2021-27212)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7713-1 advisory.

    It was discovered that OpenLDAP incorrectly handled X.509 DN parsing. A remote attacker could possibly use     this issue to cause OpenLDAP to crash, resulting in a denial of service. (CVE-2020-36229, CVE-2020-36230)

    Pasi Saarinen discovered that OpenLDAP incorrectly handled certain short timestamps. A remote attacker     could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service.
    (CVE-2021-27212)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Several vulnerabilities were discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. An unauthenticated remote attacker can take advantage of these flaws to cause a denial of service (slapd daemon crash, infinite loops) via specially crafted packets.

The remote host is running a version of macOS / Mac OS X that is 10.15.x prior to 10.15.7 Security Update 2021-003 Catalina. It is, therefore, affected by multiple vulnerabilities, including the following:

  - A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
    (CVE-2021-30712)

  - A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
    (CVE-2021-30678)

  - An application may be able to execute arbitrary code with kernel privileges. (CVE-2021-30704)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.6 Security Update 2021-004 Mojave. It is, therefore, affected by multiple vulnerabilities, including the following:

  - A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
    (CVE-2021-30712)

  - A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
    (CVE-2021-30678)

  - An application may be able to execute arbitrary code with kernel privileges. (CVE-2021-30704)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The version of openldap installed on the remote host is prior to 2.4.44-25. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2033 advisory.

    An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session     encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain     access that would otherwise be denied via a simple bind for any identity covered in those ACLs. After the     first SASL bind is completed, the sasl_ssf value is retained for all new non-SASL connections. Depending     on the ACL configuration, this can affect different types of operations (searches, modifications, etc.).
    In other words, a successful authorization step completed by one user affects the authorization     requirement for a different user. (CVE-2019-13565)

    An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate     Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).
    (CVE-2020-36221)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the     saslAuthzTo validation, resulting in denial of service. (CVE-2020-36222)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter     control handling, resulting in denial of service (double free and out-of-bounds read). (CVE-2020-36223)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the     saslAuthzTo processing, resulting in denial of service. (CVE-2020-36224)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash     in the saslAuthzTo processing, resulting in denial of service. (CVE-2020-36226)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop     Cancel operation, resulting in denial of service. (CVE-2020-36227)

    An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate     List Exact Assertion processing, resulting in denial of service. (CVE-2020-36228)

    A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN     parsing in ad_keystring, resulting in denial of service. (CVE-2020-36229)

    A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN     parsing in decode.c ber_next_element, resulting in denial of service. (CVE-2020-36230)

    In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion  ...

    NOTE: https://bugs.openldap.org/show_bug.cgi?id=9454NOTE: trunk:
    https://git.openldap.org/openldap/openldap/-/commit/3539fc33212b528c56b716584f2c2994af7c30b0NOTE: REL_ENG     2.4.x: https://git.openldap.org/openldap/openldap/-/commit/9badb73425a67768c09bcaed1a9c26c684af6c30     (CVE-2021-27212)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of openldap installed on the remote host is prior to 2.4.40-16.36. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1741 advisory.

    An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session     encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain     access that would otherwise be denied via a simple bind for any identity covered in those ACLs. After the     first SASL bind is completed, the sasl_ssf value is retained for all new non-SASL connections. Depending     on the ACL configuration, this can affect different types of operations (searches, modifications, etc.).
    In other words, a successful authorization step completed by one user affects the authorization     requirement for a different user. (CVE-2019-13565)

    An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate     Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).
    (CVE-2020-36221)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the     saslAuthzTo validation, resulting in denial of service. (CVE-2020-36222)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter     control handling, resulting in denial of service (double free and out-of-bounds read). (CVE-2020-36223)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the     saslAuthzTo processing, resulting in denial of service. (CVE-2020-36224)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the     saslAuthzTo processing, resulting in denial of service. (CVE-2020-36225)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash     in the saslAuthzTo processing, resulting in denial of service. (CVE-2020-36226)

    A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop     Cancel operation, resulting in denial of service. (CVE-2020-36227)

    An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate     List Exact Assertion processing, resulting in denial of service. (CVE-2020-36228)

    A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN     parsing in ad_keystring, resulting in denial of service. (CVE-2020-36229)

    A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN     parsing in decode.c ber_next_element, resulting in denial of service. (CVE-2020-36230)

    In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion  ...

    NOTE: https://bugs.openldap.org/show_bug.cgi?id=9454NOTE: trunk:
    https://git.openldap.org/openldap/openldap/-/commit/3539fc33212b528c56b716584f2c2994af7c30b0NOTE: REL_ENG     2.4.x: https://git.openldap.org/openldap/openldap/-/commit/9badb73425a67768c09bcaed1a9c26c684af6c30     (CVE-2021-27212)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the OpenLDAP packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - OpenLDAP An integer underflow was discovered in     OpenLDAP before 2.4.57 leading to a slapd crash in the     Certificate List Exact Assertion processing, resulting     in denial of service.(CVE-2020-36228)

  - OpenLDAP A flaw was discovered in OpenLDAP before     2.4.57 leading to a slapd crash in the Values Return     Filter control handling, resulting in denial of service     (double free and out-of-bounds read).(CVE-2020-36223)

  - OpenLDAP A flaw was discovered in OpenLDAP before     2.4.57 leading to an assertion failure in slapd in the     saslAuthzTo validation, resulting in denial of     service.(CVE-2020-36222)

  - OpenLDAP An integer underflow was discovered in     OpenLDAP before 2.4.57 leading to slapd crashes in the     Certificate Exact Assertion processing, resulting in     denial of service (schema_init.c     serialNumberAndIssuerCheck).(CVE-2020-36221)

  - OpenLDAP A flaw was discovered in OpenLDAP before     2.4.57 leading in an assertion failure in slapd in the     X.509 DN parsing in decode.c ber_next_element,     resulting in denial of service.(CVE-2020-36230)

  - OpenLDAP A flaw was discovered in OpenLDAP before     2.4.57 leading to an invalid pointer free and slapd     crash in the saslAuthzTo processing, resulting in     denial of service.(CVE-2020-36224)

  - OpenLDAP A flaw was discovered in OpenLDAP before     2.4.57 leading to a double free and slapd crash in the     saslAuthzTo processing, resulting in denial of     service.(CVE-2020-36225)

  - OpenLDAP A flaw was discovered in OpenLDAP before     2.4.57 leading to an infinite loop in slapd with the     cancel_extop Cancel operation, resulting in denial of     service.(CVE-2020-36227)

  - OpenLDAP A flaw was discovered in OpenLDAP before     2.4.57 leading to a memch->bv_len miscalculation and     slapd crash in the saslAuthzTo processing, resulting in     denial of service.(CVE-2020-36226)

  - OpenLDAP A flaw was discovered in ldap_X509dn2bv in     OpenLDAP before 2.4.57 leading to a slapd crash in the     X.509 DN parsing in ad_keystring, resulting in denial     of service.(CVE-2020-36229)

  - A NULL pointer dereference was found in OpenLDAP server     and was fixed in openldap 2.4.55, during a request for     renaming RDNs. An unauthenticated attacker could     remotely crash the slapd process by sending a specially     crafted request, causing a Denial of     Service.(CVE-2020-25692)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In OpenLDAP through 2.4.57 and 2.5.x through     2.5.1alpha, an assertion failure in slapd can occur in     the issuerAndThisUpdateCheck function via a crafted     packet, resulting in a denial of service (daemon exit)     via a short timestamp. This is related to schema_init.c     and checkTime.(CVE-2021-27212)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     in an assertion failure in slapd in the X.509 DN     parsing in decode.c ber_next_element, resulting in     denial of service.(CVE-2020-36230)

  - A flaw was discovered in ldap_X509dn2bv in OpenLDAP     before 2.4.57 leading to a slapd crash in the X.509 DN     parsing in ad_keystring, resulting in denial of     service.(CVE-2020-36229)

  - An integer underflow was discovered in OpenLDAP before     2.4.57 leading to a slapd crash in the Certificate List     Exact Assertion processing, resulting in denial of     service.(CVE-2020-36228)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an infinite loop in slapd with the cancel_extop     Cancel operation, resulting in denial of     service.(CVE-2020-36227)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a memch->bv_len miscalculation and slapd crash in     the saslAuthzTo processing, resulting in denial of     service.(CVE-2020-36226)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a double free and slapd crash in the saslAuthzTo     processing, resulting in denial of     service.(CVE-2020-36225)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an invalid pointer free and slapd crash in the     saslAuthzTo processing, resulting in denial of     service.(CVE-2020-36224)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a slapd crash in the Values Return Filter control     handling, resulting in denial of service (double free     and out-of-bounds read).(CVE-2020-36223)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an assertion failure in slapd in the saslAuthzTo     validation, resulting in denial of     service.(CVE-2020-36222)

  - An integer underflow was discovered in OpenLDAP before     2.4.57 leading to slapd crashes in the Certificate     Exact Assertion processing, resulting in denial of     service (schema_init.c     serialNumberAndIssuerCheck).(CVE-2020-36221)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     in an assertion failure in slapd in the X.509 DN     parsing in decode.c ber_next_element, resulting in     denial of service.(CVE-2020-36230)

  - A flaw was discovered in ldap_X509dn2bv in OpenLDAP     before 2.4.57 leading to a slapd crash in the X.509 DN     parsing in ad_keystring, resulting in denial of     service.(CVE-2020-36229)

  - An integer underflow was discovered in OpenLDAP before     2.4.57 leading to a slapd crash in the Certificate List     Exact Assertion processing, resulting in denial of     service.(CVE-2020-36228)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an infinite loop in slapd with the cancel_extop     Cancel operation, resulting in denial of     service.(CVE-2020-36227)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a memch->bv_len miscalculation and slapd crash in     the saslAuthzTo processing, resulting in denial of     service.(CVE-2020-36226)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a double free and slapd crash in the saslAuthzTo     processing, resulting in denial of     service.(CVE-2020-36225)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an invalid pointer free and slapd crash in the     saslAuthzTo processing, resulting in denial of     service.(CVE-2020-36224)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a slapd crash in the Values Return Filter control     handling, resulting in denial of service (double free     and out-of-bounds read).(CVE-2020-36223)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an assertion failure in slapd in the saslAuthzTo     validation, resulting in denial of     service.(CVE-2020-36222)

  - An integer underflow was discovered in OpenLDAP before     2.4.57 leading to slapd crashes in the Certificate     Exact Assertion processing, resulting in denial of     service (schema_init.c     serialNumberAndIssuerCheck).(CVE-2020-36221)

  - In OpenLDAP through 2.4.57 and 2.5.x through     2.5.1alpha, an assertion failure in slapd can occur in     the issuerAndThisUpdateCheck function via a crafted     packet, resulting in a denial of service (daemon exit)     via a short timestamp. This is related to schema_init.c     and checkTime.(CVE-2021-27212)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A NULL pointer dereference was found in OpenLDAP server     and was fixed in openldap 2.4.55, during a request for     renaming RDNs. An unauthenticated attacker could     remotely crash the slapd process by sending a specially     crafted request, causing a Denial of     Service.(CVE-2020-25692)

  - An integer underflow was discovered in OpenLDAP before     2.4.57 leading to slapd crashes in the Certificate     Exact Assertion processing, resulting in denial of     service (schema_init.c     serialNumberAndIssuerCheck).(CVE-2020-36221)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an assertion failure in slapd in the saslAuthzTo     validation, resulting in denial of     service.(CVE-2020-36222)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a slapd crash in the Values Return Filter control     handling, resulting in denial of service (double free     and out-of-bounds read).(CVE-2020-36223)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an invalid pointer free and slapd crash in the     saslAuthzTo processing, resulting in denial of     service.(CVE-2020-36224)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a double free and slapd crash in the saslAuthzTo     processing, resulting in denial of     service.(CVE-2020-36225)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to a memch->bv_len miscalculation and slapd crash in     the saslAuthzTo processing, resulting in denial of     service.(CVE-2020-36226)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     to an infinite loop in slapd with the cancel_extop     Cancel operation, resulting in denial of     service.(CVE-2020-36227)

  - An integer underflow was discovered in OpenLDAP before     2.4.57 leading to a slapd crash in the Certificate List     Exact Assertion processing, resulting in denial of     service.(CVE-2020-36228)

  - A flaw was discovered in ldap_X509dn2bv in OpenLDAP     before 2.4.57 leading to a slapd crash in the X.509 DN     parsing in ad_keystring, resulting in denial of     service.(CVE-2020-36229)

  - A flaw was discovered in OpenLDAP before 2.4.57 leading     in an assertion failure in slapd in the X.509 DN     parsing in decode.c ber_next_element, resulting in     denial of service.(CVE-2020-36230)

  - In OpenLDAP through 2.4.57 and 2.5.x through     2.5.1alpha, an assertion failure in slapd can occur in     the issuerAndThisUpdateCheck function via a crafted     packet, resulting in a denial of service (daemon exit)     via a short timestamp. This is related to schema_init.c     and checkTime.(CVE-2021-27212)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
149985	macOS 10.14.x < 10.14.6 安全更新 2021-004 Mojave (HT212531)	Nessus	MacOS X Local Security Checks	5/26/2021	5/28/2024	critical
175021	Amazon Linux 2：openldap (ALAS-2023-2033)	Nessus	Amazon Linux Local Security Checks	5/2/2023	12/11/2024	high
175093	Amazon Linux AMI：openldap (ALAS-2023-1741)	Nessus	Amazon Linux Local Security Checks	5/4/2023	12/11/2024	high
258033	Ubuntu 14.04 LTS : OpenLDAP vulnerabilities (USN-7713-1)	Nessus	Ubuntu Local Security Checks	8/27/2025	8/27/2025	high
146122	Debian DSA-4845-1 : openldap - security update	Nessus	Debian Local Security Checks	2/4/2021	1/24/2024	high
149984	macOS 10.15.x < 10.15.7 Security Update 2021-002 Catalina (HT212530)	Nessus	MacOS X Local Security Checks	5/26/2021	5/28/2024	critical
149985	macOS 10.14.x < 10.14.6 Security Update 2021-004 Mojave (HT212531)	Nessus	MacOS X Local Security Checks	5/26/2021	5/28/2024	critical
175021	Amazon Linux 2 : openldap (ALAS-2023-2033)	Nessus	Amazon Linux Local Security Checks	5/2/2023	12/11/2024	high
175093	Amazon Linux AMI : openldap (ALAS-2023-1741)	Nessus	Amazon Linux Local Security Checks	5/4/2023	12/11/2024	high
147513	EulerOS Virtualization for ARM 64 3.0.2.0 : OpenLDAP (EulerOS-SA-2021-1394)	Nessus	Huawei Local Security Checks	3/10/2021	1/11/2024	high
148621	EulerOS Virtualization 2.9.0 : openldap (EulerOS-SA-2021-1753)	Nessus	Huawei Local Security Checks	4/15/2021	1/4/2024	high
151249	EulerOS Virtualization 3.0.6.6 : openldap (EulerOS-SA-2021-2029)	Nessus	Huawei Local Security Checks	7/1/2021	12/11/2023	high
151384	EulerOS Virtualization 3.0.2.2 : openldap (EulerOS-SA-2021-2152)	Nessus	Huawei Local Security Checks	7/6/2021	12/11/2023	high

Detections

Analytics

Plugins Search

critical

high

high

high

high

critical

critical

high

high

high

high

high

high