CVE-2022-29155

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-29155
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-29155.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-29155
Aliases
Downstream
Related
Published
2022-05-04T20:15:07.690Z
Modified
2026-02-28T04:42:44.123911Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.

References

Affected packages

Git / github.com/openldap/openldap

Affected ranges

Type
GIT
Repo
https://github.com/openldap/openldap
Events
Introduced
0a6e8804ed43395db12d31ca3ccf20fe92edded1
Fixed
11b24f1c4a2ff8655842409479b1f377a80596ea
Introduced
9794f9fbe87267e8323c44a260abd2656d1652e7
Fixed
2bda1fa98fbcedc6cd5995ea905427b8bef89f9d

Affected versions

Other
OPENLDAP_REL_ENG_2_6_0
OPENLDAP_REL_ENG_2_6_1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-29155.json"