https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T22:37:40.609356+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-29155 CVE-2022-29155 2026-10-01T22:37:40.614852+00:00

In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.

 https://vulnerability.circl.lu/vuln/usn-5424-1 USN-5424-1 — openldap vulnerability 2026-10-01T22:37:40.614935+00:00

Affected: Ubuntu:18.04:LTS: openldap, Ubuntu:20.04:LTS: openldap, Ubuntu:22.04:LTS: openldap

It was discovered that OpenLDAP incorrectly handled certain SQL statements within LDAP queries in the experimental back-sql backend. A remote attacker could possibly use this issue to perform an SQL injection attack and alter the database.