https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-5794.htmlhttps://patchthecve.com/cve/CVE-2007-5794.htmlTue, 16 Jun 2026 22:46:50 +0000MEDIUM 4.3: Race condition in nss_ldap, when used in applications that are linked against the pthread library and fork after a call to nss_ldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this issue was originally reported for Dovecot with the wrong mailhttps://patchthecve.com/cve/CVE-2005-2069.htmlhttps://patchthecve.com/cve/CVE-2005-2069.htmlTue, 16 Jun 2026 22:14:10 +0000MEDIUM 5.0: pam_ldap and nss_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password.https://patchthecve.com/cve/CVE-2002-0825.htmlhttps://patchthecve.com/cve/CVE-2002-0825.htmlTue, 16 Jun 2026 21:58:12 +0000HIGH 7.5: Buffer overflow in the DNS SRV code for nss_ldap before nss_ldap-198 allows remote attackers to cause a denial of service and possibly execute arbitrary code.https://patchthecve.com/cve/CVE-2002-0735.htmlhttps://patchthecve.com/cve/CVE-2002-0735.htmlTue, 16 Jun 2026 21:58:02 +0000HIGH 7.5: Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_LDAP) 2.0.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code by triggering log messages.https://patchthecve.com/cve/CVE-2000-1045.htmlhttps://patchthecve.com/cve/CVE-2000-1045.htmlTue, 16 Jun 2026 21:53:02 +0000LOW 1.2: nss_ldap earlier than 121, when run with nscd (name service caching daemon), allows remote attackers to cause a denial of service via a flood of LDAP requests.