PT-2020-19925
CVE-2020-8023
·
تاريخ النشر
2020-07-06
·
تاريخ التحديث
2020-09-11
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
openldap2 versions prior to 2.4.26-0.74.13.1
openldap2 versions prior to 2.4.41-18.71.2
openldap2 versions prior to 2.4.46-9.31.1
openldap2 versions prior to 2.4.46-lp151.10.12.1
openldap2 versions prior to 2.4.46-lp152.14.3.1
Description
The issue is related to the acceptance of extraneous untrusted data with trusted data in the start script of openldap2, allowing local attackers to escalate privileges from user ldap to root.
Recommendations
For openldap2 versions prior to 2.4.26-0.74.13.1, update to version 2.4.26-0.74.13.1 or later.
For openldap2 versions prior to 2.4.41-18.71.2, update to version 2.4.41-18.71.2 or later.
For openldap2 versions prior to 2.4.46-9.31.1, update to version 2.4.46-9.31.1 or later.
For openldap2 versions prior to 2.4.46-lp151.10.12.1, update to version 2.4.46-lp151.10.12.1 or later.
For openldap2 versions prior to 2.4.46-lp152.14.3.1, update to version 2.4.46-lp152.14.3.1 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾