It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1586 advisory.

    In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the     experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an     LDAP search operation when the search filter is processed, due to a lack of proper escaping.
    (CVE-2022-29155)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the     experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an     LDAP search operation when the search filter is processed, due to a lack of proper escaping.
    (CVE-2022-29155)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the     experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an     LDAP search operation when the search filter is processed, due to a lack of proper escaping.
    (CVE-2022-29155)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of openldap installed on the remote host is prior to 2.4.44-23. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-1958 advisory.

    In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the     experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an     LDAP search operation when the search filter is processed, due to a lack of proper escaping.
    (CVE-2022-29155)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5424-2 advisory.

    USN-5424-1 fixed a vulnerability in OpenLDAP. This update provides the corresponding update for Ubuntu     14.04 ESM and Ubuntu 16.04 ESM.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1832-1 advisory.

  - In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the     experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an     LDAP search operation when the search filter is processed, due to a lack of proper escaping.
    (CVE-2022-29155)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5424-1 advisory.

    It was discovered that OpenLDAP incorrectly handled certain SQL statements within LDAP queries in the     experimental back-sql backend. A remote attacker could possibly use this issue to perform an SQL injection     attack and alter the database.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of openldap installed on the remote host is prior to 2.4.40-16.32. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1691 advisory.

    In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the     experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an     LDAP search operation when the search filter is processed, due to a lack of proper escaping.
    (CVE-2022-29155)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
161610	Amazon Linux AMI : openldap (ALAS-2022-1586)	Nessus	Amazon Linux Local Security Checks	2022/5/27	2024/12/11	critical
166642	EulerOS 2.0 SP3 : openldap (EulerOS-SA-2022-2628)	Nessus	Huawei Local Security Checks	2022/10/27	2023/10/6	critical
165937	EulerOS Virtualization 3.0.6.0 : openldap (EulerOS-SA-2022-2577)	Nessus	Huawei Local Security Checks	2022/10/10	2023/10/10	critical
165384	EulerOS Virtualization 2.9.0 : openldap (EulerOS-SA-2022-2394)	Nessus	Huawei Local Security Checks	2022/9/23	2023/10/11	critical
171833	Amazon Linux 2 : openldap (ALAS-2023-1958)	Nessus	Amazon Linux Local Security Checks	2023/2/23	2024/12/11	critical
162891	EulerOS 2.0 SP9 : openldap (EulerOS-SA-2022-2005)	Nessus	Huawei Local Security Checks	2022/7/8	2023/10/18	critical
161386	Ubuntu 16.04 ESM : OpenLDAP vulnerability (USN-5424-2)	Nessus	Ubuntu Local Security Checks	2022/5/19	2024/10/29	critical
161495	SUSE SLES15 Security Update : openldap2 (SUSE-SU-2022:1832-1)	Nessus	SuSE Local Security Checks	2022/5/25	2023/7/14	critical
161250	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : OpenLDAP vulnerability (USN-5424-1)	Nessus	Ubuntu Local Security Checks	2022/5/17	2024/8/27	critical
163153	EulerOS Virtualization 2.10.1 : openldap (EulerOS-SA-2022-2116)	Nessus	Huawei Local Security Checks	2022/7/14	2023/10/18	critical
171865	Amazon Linux AMI : openldap (ALAS-2023-1691)	Nessus	Amazon Linux Local Security Checks	2023/2/23	2024/12/11	critical

検出

プラグインの検索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical