https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 22:37:40 +0000 https://vulnerability.circl.lu/vuln/cve-2022-29155 <p>In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.</p> <p>In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.</p> https://vulnerability.circl.lu/vuln/cve-2022-29155 https://vulnerability.circl.lu/vuln/usn-5424-1 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: openldap, Ubuntu:20.04:LTS: openldap, Ubuntu:22.04:LTS: openldap</p> <p>It was discovered that OpenLDAP incorrectly handled certain SQL statements within LDAP queries in the experimental back-sql backend. A remote attacker could possibly use this issue to perform an SQL injection attack and alter the database.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: openldap, Ubuntu:20.04:LTS: openldap, Ubuntu:22.04:LTS: openldap</p> <p>It was discovered that OpenLDAP incorrectly handled certain SQL statements within LDAP queries in the experimental back-sql backend. A remote attacker could possibly use this issue to perform an SQL injection attack and alter the database.</p> https://vulnerability.circl.lu/vuln/usn-5424-1