Known vulnerabilities in OpenLDAP 2.4.17

Software: OpenLDAP
Version: 2.4.17
Software CPE: cpe:2.3:a:openldap_org:openldap:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 27
Public exploits: 1
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting OpenLDAP version 2.4.17 OpenLDAP 2.4.17 is affected by 27 vulnerabilities: 21 medium, 6 low Critical High Medium Low

Vulnerabilities (27)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98559 - Improper input validation
CVE-2015-3276
CWE-20 Medium
No
No
2.5.4 15.10.2024 SB2015120705
SB2024101547
SB2017020113
#VU77252 - NULL Pointer Dereference
CVE-2023-2953
CWE-476 Medium
No
No
2.5.14 13.06.2023 SB2023061366
SB2023061417
SB2023061418
and 59 more
#VU50779 - Reachable Assertion
CVE-2021-27212
CWE-617 Medium
No
No
2.4.58 17.02.2021 SB2021021717
SB2021022225
SB2021022613
and 13 more
#VU50389 - Integer underflow
CVE-2020-36221
CWE-191 Medium
No
No
2.4.57 26.01.2021 SB2021020601
SB2021020602
SB2021011828
and 15 more
#VU50390 - Reachable Assertion
CVE-2020-36222
CWE-617 Medium
No
No
2.4.57 26.01.2021 SB2021020601
SB2021020602
SB2021011829
and 14 more
#VU50391 - Double Free
CVE-2020-36223
CWE-415 Medium
No
No
2.4.57 26.01.2021 SB2021020601
SB2021020602
SB2021052415
and 13 more
#VU50392 - Double Free
CVE-2020-36225
CWE-415 Medium
No
No
2.4.57 26.01.2021 SB2021020601
SB2021020602
SB2021052415
and 13 more
#VU50393 - Resource Management Errors
CVE-2020-36226
CWE-399 Medium
No
No
2.4.57 26.01.2021 SB2021020601
SB2021020602
SB2021052415
and 13 more
#VU50394 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-36227
CWE-835 Medium
No
No
2.4.57 26.01.2021 SB2021020601
SB2021020602
SB2021052415
and 13 more
#VU50395 - Integer underflow
CVE-2020-36228
CWE-191 Medium
No
No
2.4.57 26.01.2021 SB2021020601
SB2021020602
SB2021052415
and 13 more
#VU50396 - Type confusion
CVE-2020-36229
CWE-843 Medium
No
No
2.4.57 26.01.2021 SB2021020601
SB2021020602
SB2021052415
and 15 more
#VU50397 - Reachable Assertion
CVE-2020-36230
CWE-617 Medium
No
No
2.4.57 26.01.2021 SB2021020601
SB2021020602
SB2021052415
and 15 more
#VU50398 - Release of invalid pointer or reference
CVE-2020-36224
CWE-763 Medium
No
No
2.4.57 26.01.2021 SB2021020601
SB2021020602
SB2021052415
and 13 more
#VU48516 - Reachable Assertion
CVE-2020-25709
CWE-617 Medium
No
No
2.4.56 18.11.2020 SB2020111801
SB2020111802
SB2020103044
and 16 more
#VU48515 - Reachable Assertion
CVE-2020-25710
CWE-617 Medium
No
No
2.4.56 17.11.2020 SB2020111801
SB2020111802
SB2020103045
and 15 more
#VU48143 - NULL Pointer Dereference
CVE-2020-25692
CWE-476 Medium
No
No
2.4.55 04.11.2020 SB2020110407
SB2020110408
SB2020121028
and 10 more
#VU43976 - Exposure of sensitive information to an unauthorized actor
CVE-2012-2668
CWE-200 Medium
No
No
- 17.06.2012 SB2012061702
SB2012081801
#VU45182 - Resource Management Errors
CVE-2011-1081
CWE-399 Medium
Public exploit available
No
- 20.03.2011 SB2011032003
SB2015033120
#VU45194 - Permissions, Privileges, and Access Controls
CVE-2011-1024
CWE-264 Low
No
No
- 20.03.2011 SB2011032003
SB2015033120
#VU45195 - Improper Authentication
CVE-2011-1025
CWE-287 Medium
No
No
- 20.03.2011 SB2011032003
SB2015033120


Showing elements 1 - 20 out of 27