ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2015.0143
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2015-0143)
Resumen:	The remote host is missing an update for the 'openldap' package(s) announced via the MGASA-2015-0143 advisory.
Descripción:	Summary: The remote host is missing an update for the 'openldap' package(s) announced via the MGASA-2015-0143 advisory. Vulnerability Insight: Updated openldap packages fix security vulnerability: The deref overlay in slapd 2.4.13 through 2.4.40 dereferences a NULL pointer when a search request includes the Deref control with an empty list of attributes to return (missing input validation). This allows a remote unauthenticated client to crash the LDAP server (CVE-2015-1545). Affected Software/OS: 'openldap' package(s) on Mageia 4. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1545 http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html BugTraq ID: 72519 http://www.securityfocus.com/bid/72519 Bugtraq: 20191211 APPLE-SA-2019-12-10-3 macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra (Google Search) https://seclists.org/bugtraq/2019/Dec/23 Debian Security Information: DSA-3209 (Google Search) http://www.debian.org/security/2015/dsa-3209 http://seclists.org/fulldisclosure/2019/Dec/26 http://www.mandriva.com/security/advisories?name=MDVSA-2015:073 http://www.mandriva.com/security/advisories?name=MDVSA-2015:074 http://www.openwall.com/lists/oss-security/2015/02/07/3 http://www.securitytracker.com/id/1032399 http://secunia.com/advisories/62787 SuSE Security Announcement: openSUSE-SU-2015:1325 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-07/msg00069.html XForce ISS Database: openldap-cve20151545-dos(100937) https://exchange.xforce.ibmcloud.com/vulnerabilities/100937
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.