CVE-2022-29155
CriticalAdvisory
Published 4 May 2022In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.645
- 99th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 721
- of 17,787 indexed, latest versions
- Container images
- 614
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
openldap - security update
Carried by container images the latest versions of 721 of 17,787 indexed charts deploy, on 614 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| openldapdeb | 2.4.31-1+nmu2ubuntu8, 2.4.31-1+nmu2ubuntu8.4, 2.4.31-1+nmu2ubuntu8.5, 2.4.42+dfsg-2ubuntu3.2+40 more | 2.4.31-1+nmu2ubuntu8.5+esm5, 2.4.42+dfsg-2ubuntu3.13+esm1, 2.4.44+dfsg-5+deb9u9, 2.4.45+dfsg-1ubuntu1.11+4 more | 599 |
| openldapapk | 2.6.0-r0 | 2.6.2-r0 | 7 |
| openldap2rpm | 2.4.46-9.28.2, 2.4.46-9.31.1, 2.4.46-9.37.1, 2.4.46-9.40.1 | 2.4.46-150000.9.71.1, 2.4.46-150200.14.8.1 | 8 |
- OSV records
- ALPINE-CVE-2022-29155UBUNTU-CVE-2022-29155DLA-3017-1DSA-5140-1SUSE-SU-2022:1670-1SUSE-SU-2022:1832-1
- Also known as
- USN-5424-1, USN-5424-2
Charts affected
721 by stars
Container images carrying it
614 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| mcr.microsoft.com/ | 49a57dc220b1 | openldap | 2.4.49+dfsg-2ubuntu1.9 | 1 |
| mcr.microsoft.com/ | e1e9cf5297a6 | openldap | 2.4.47+dfsg-3+deb10u7 | 1 |
| public.ecr.aws/ | 573779e57fae | openldap | 2.4.49+dfsg-2ubuntu1.9 | 1 |
| quay.io/ | fae21f06131f | openldap | 2.4.47+dfsg-3+deb10u7 | 1 |
| quay.io/ | 01c3b7acb301 | openldap | 2.4.44+dfsg-5+deb9u9 | 1 |
| quay.io/ | 99ccdfd543e1 | openldap | 2.4.47+dfsg-3+deb10u7 | 1 |
| quay.io/ | a1c3843b03bc | openldap | 2.4.42+dfsg-2ubuntu3.13+esm1 | 1 |
| quay.io/ | a8b21cec412c | openldap | 2.4.47+dfsg-3+deb10u7 | 1 |
| quay.io/ | 9a8d95ca0bd9 | openldap | 2.4.47+dfsg-3+deb10u7 | 1 |
| quay.io/ | c6a934439421 | openldap | 2.4.42+dfsg-2ubuntu3.13+esm1 | 1 |
| registry.gitlab.com/ | f6385712935f | openldap | 2.4.49+dfsg-2ubuntu1.9 | 1 |
| registry.gitlab.com/ | f21f19346b29 | openldap | 2.4.47+dfsg-3+deb10u7 | 1 |
| registry.gitlab.com/ | 4eaf9c911f33 | openldap | 2.4.57+dfsg-3+deb11u1 | 1 |
| registry.gitlab.com/ | 0886cbbc5f95 | openldap | 2.4.57+dfsg-3+deb11u1 | 1 |