VDB

GCVE-110-MAGEIA-2019-280

GCVE-110-MAGEIA-2019-280
Advisory Published
Vulnetix · Advisory published September 15, 2019
Updated openldap packages fix security vulnerabilities: It was discovered that OpenLDAP incorrectly handled rootDN delegation. A database administrator could use this issue to request authorization as an identity from another database, contrary to expectations (CVE-2019-13057). It was discovered that OpenLDAP incorrectly handled SASL authentication and session encryption. After a first SASL bind was completed, it was possible to obtain access by performing simple binds, contrary to expectations (CVE-2019-13565).

Affected Products

VendorProductVersionsPlatforms
Mageiaopenldap0 (affected), 2.4.47-3.1.mga7 (unaffected)
Mageiaopenldap2.4.45-2.1.mga6 (unaffected), 0 (affected)

Browse GCVE Records

73,442 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›