OpenLDAP PID File Vulnerability: Risk of Arbitrary Process Termination
Summary
ALPINE-CVE-2017-14159: slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID fil... Affects openldap versions < 2.4.46-r0. Fixed in 2.4.46-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenLDAP is an open-source implementation of the Lightweight Directory Access Protocol (LDAP), which is used for directory services. It is widely utilized for managing user information and authentication in various applications. The package is known for its scalability and flexibility, allowing it to serve both small and large-scale environments. However, certain versions of OpenLDAP have a vulnerability that can be exploited due to improper handling of PID files, which can lead to significant security risks.
Vulnerability Detail
The vulnerability identified as CVE-2017-14159 affects slapd in OpenLDAP versions 2.4.45 and earlier. It arises from the creation of a PID file after the service has dropped privileges to a non-root account. This flaw allows local users with access to the non-root account to modify the PID file before a root script executes a command to kill the process associated with that PID. This could lead to unauthorized termination of arbitrary processes, potentially compromising system stability and security.
How To Fix
Minimum fixed version
2.4.46-r0
This is the first release that contains the fix.
sudo apk add --upgrade openldapTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, ensure that only trusted users have access to the non-root account that can modify the PID file. Additionally, consider implementing stricter access controls and monitoring to detect any unauthorized attempts to manipulate the PID file.
Conclusion
The CVE-2017-14159 vulnerability in OpenLDAP poses a significant risk by allowing local users to terminate arbitrary processes. It is crucial to update to the patched version of OpenLDAP to mitigate this risk. Implementing strict access controls and monitoring can also help in managing this vulnerability effectively.
See every vulnerability recorded for openldap →
FAQ
CVE-2017-14159 is a vulnerability in OpenLDAP that allows local users to kill arbitrary processes by modifying a PID file created by slapd after dropping privileges.
OpenLDAP versions 2.4.45 and earlier are affected by this vulnerability.
Exploitation of this vulnerability can lead to unauthorized termination of processes, which may compromise system stability and security.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score for CVE-2017-14159 is 4.7, indicating a medium severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for openldap.
