12:10 p.m.
Hi,
I saw today two CVE on OpenLDAP:
* http://vigilance.fr/vulnerability/OpenLDAP-NULL-pointer-dereference-via-d...
* http://vigilance.fr/vulnerability/OpenLDAP-use-after-free-via-Matched-Val...
Don't know if they are reported in some ITS.
Clément OUDOT.
4:36 p.m.
Clément OUDOT wrote:
Hi,
I saw today two CVE on OpenLDAP:
* http://vigilance.fr/vulnerability/OpenLDAP-NULL-pointer-dereference-via-d...
* http://vigilance.fr/vulnerability/OpenLDAP-use-after-free-via-Matched-Val...
Don't know if they are reported in some ITS.
That's because you're reading 2nd or 3rd-hand reports. Read the actual CVEs and
you'll see that relevant ITSs already linked.
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546
Given that the deref overlay isn't even documented and is probably used by only a
handful of OpenLDAP developers I don't believe it even merited a CVE record.
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/
11:59 p.m.
2015-02-24 1:36 GMT+01:00 Howard Chu <hyc(a)symas.com>:
Clément OUDOT wrote:
>
> Hi,
>
> I saw today two CVE on OpenLDAP:
> *
> http://vigilance.fr/vulnerability/OpenLDAP-NULL-pointer-dereference-via-d...
> *
> http://vigilance.fr/vulnerability/OpenLDAP-use-after-free-via-Matched-Val...
>
> Don't know if they are reported in some ITS.
That's because you're reading 2nd or 3rd-hand reports. Read the actual CVEs
and you'll see that relevant ITSs already linked.
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546
Given that the deref overlay isn't even documented and is probably used by
only a handful of OpenLDAP developers I don't believe it even merited a CVE
record.
Agreed for the deref CVE, but I confirm that the matched values bug is
present in 2.4.40 official version (and so in LTB packages). I saw
that 2.4.41 was in preparation, any idea of a release date?
Clément.
1:47 a.m.
Howard Chu wrote:
Given that the deref overlay isn't even documented and is
probably used by
only a handful of OpenLDAP developers I don't believe it even merited a CVE
record.
Hmm, not sure. Arthur de Jong implemented support for this control in
nss-pam-ldapd a year ago [1] and IIRC also discussed it on the
openldap-technical mailing list.
Ciao, Michael.
[1] http://arthurdejong.org/git/nss-pam-ldapd/tree/ChangeLog
[..]
2014-01-05 Arthur de Jong <arthur(a)arthurdejong.org>
* [c6c317e] : Implement deref control handling
This uses the LDAP_CONTROL_X_DEREF control as described in
draft-masarati-ldap-deref-00 to request the LDAP server to
dereference group member attribute values to uid attribute values.
[..]
2153
days inactive
2154
days old
3 comments
3 participants
participants (3)
-
Clément OUDOT -
Howard Chu -
Michael Ströder