CVE-2020-8023

Name of the Vulnerable Software and Affected Versions openldap2 versions prior to 2.4.26-0.74.13.1 openldap2 versions prior to 2.4.41-18.71.2 openldap2 versions prior to 2.4.46-9.31.1 openldap2 versions prior to 2.4.46-lp151.10.12.1 openldap2 versions prior to 2.4.46-lp152.14.3.1

Description The issue is related to the acceptance of extraneous untrusted data with trusted data in the start script of openldap2, allowing local attackers to escalate privileges from user ldap to root.

Recommendations For openldap2 versions prior to 2.4.26-0.74.13.1, update to version 2.4.26-0.74.13.1 or later. For openldap2 versions prior to 2.4.41-18.71.2, update to version 2.4.41-18.71.2 or later. For openldap2 versions prior to 2.4.46-9.31.1, update to version 2.4.46-9.31.1 or later. For openldap2 versions prior to 2.4.46-lp151.10.12.1, update to version 2.4.46-lp151.10.12.1 or later. For openldap2 versions prior to 2.4.46-lp152.14.3.1, update to version 2.4.46-lp152.14.3.1 or later.