PatchTheCVEauth ldap vulnerabilities and fixes
Recent CVEs affecting auth ldap, with upgrade or downgrade steps. 1 tracked.
Also searched as: authldap.
auth ldap has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-01-09. Highest priority: CVE-2006-0150 (score 54/100).
- CVE-2006-0150 HIGH 7.5 DOWNGRADE Multiple format string vulnerabilities in the auth_ldap_log_reason function in Apache auth_ldap 1.6.0 and earl
FAQ
How do I fix auth ldap vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is auth ldap being exploited right now?
None of the tracked auth ldap CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which auth ldap CVE should I patch first?
CVE-2006-0150 currently ranks highest (54/100): Multiple format string vulnerabilities in the auth_ldap_log_reason function in Apache auth_ldap 1.6.0 and earl.