CVE-2022-29155

2022-05-0400:00:00

ubuntu.com

0.008 Low

EPSS

Percentile

81.4%

JSON

In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection
vulnerability exists in the experimental back-sql backend to slapd, via a
SQL statement within an LDAP query. This can occur during an LDAP search
operation when the search filter is processed, due to a lack of proper
escaping.

Bugs

<https://bugs.openldap.org/show_bug.cgi?id=9815>

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchopenldap< 2.4.45+dfsg-1ubuntu1.11UNKNOWN
ubuntu20.04noarchopenldap< 2.4.49+dfsg-2ubuntu1.9UNKNOWN
ubuntu21.10noarchopenldap< 2.5.6+dfsg-1~exp1ubuntu1.1UNKNOWN
ubuntu22.04noarchopenldap< 2.5.11+dfsg-1~exp1ubuntu3.1UNKNOWN
ubuntu14.04noarchopenldap< 2.4.31-1+nmu2ubuntu8.5+esm5UNKNOWN
ubuntu16.04noarchopenldap< 2.4.42+dfsg-2ubuntu3.13+esm1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	openldap	< 2.4.45+dfsg-1ubuntu1.11	UNKNOWN
ubuntu	20.04	noarch	openldap	< 2.4.49+dfsg-2ubuntu1.9	UNKNOWN
ubuntu	21.10	noarch	openldap	< 2.5.6+dfsg-1~exp1ubuntu1.1	UNKNOWN
ubuntu	22.04	noarch	openldap	< 2.5.11+dfsg-1~exp1ubuntu3.1	UNKNOWN
ubuntu	14.04	noarch	openldap	< 2.4.31-1+nmu2ubuntu8.5+esm5	UNKNOWN
ubuntu	16.04	noarch	openldap	< 2.4.42+dfsg-2ubuntu3.13+esm1	UNKNOWN