CVE-2019-13565: openldap from 2.0 (inclusive), through 2.4.47 (inclusive); +12 more affected products

Affected technology

openldap · from 2.0 (inclusive), through 2.4.47 (inclusive)
openldap

ubuntu linux · 12.04
canonical

ubuntu linux · 14.04
canonical

ubuntu linux · 16.04
canonical

ubuntu linux · 18.04
canonical

ubuntu linux · 19.04
canonical

debian linux · 8.0
debian

leap · 15.0
opensuse

leap · 15.1
opensuse

traffix signaling delivery controller · 5.0.0
f5

traffix signaling delivery controller · 5.1.0
f5

mac os x · from 10.13 (inclusive), before 10.13.6 (exclusive)
apple

mac os x · from 10.14 (inclusive), before 10.14.6 (exclusive)
apple

mac os x · from 10.15 (inclusive), before 10.15.2 (exclusive)
apple

mac os x · 10.13.6
apple

mac os x · 10.13.6 · update security_update_2018-002
apple

mac os x · 10.13.6 · update security_update_2018-003
apple

mac os x · 10.13.6 · update security_update_2019-001
apple

mac os x · 10.13.6 · update security_update_2019-002
apple

mac os x · 10.13.6 · update security_update_2019-003
apple

mac os x · 10.13.6 · update security_update_2019-004
apple

mac os x · 10.13.6 · update security_update_2019-005
apple

mac os x · 10.13.6 · update security_update_2019-006
apple

mac os x · 10.14.6
apple

mac os x · 10.14.6 · update security_update_2019-001
apple

blockchain platform · before 21.1.2 (exclusive)
oracle

zfs storage appliance kit · 8.8
oracle

solaris · 11
oracle

n/a · n/a
Vendor not specified by the source

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Description’s affected range: before 2.4.48

Component: Not specified by the source

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality impact as high; integrity and availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.