CVE-2020-25709
HighCVSS 7.5Exploitation Probability (EPSS)
High risk86th percentile - higher than 86% of all known CVEs
Summary
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure.
Risk Assessment
The highest threat from this vulnerability is to system availability.
Recommendation
Update OpenLDAP to a patched version.
Other vulnerabilities in OpenLDAP
See all- CVE-2020-36230High
A flaw in OpenLDAP before 2.4.57 leads to an assertion failure in slapd during X.509 DN parsing in decode.c (ber_next_element), resulting in denial of service.
- CVE-2020-36229High
A flaw was discovered in OpenLDAP before 2.4.57 in ldap_X509dn2bv leading to a slapd crash in X.509 DN parsing in ad_keystring, resulting in denial of service.
- CVE-2020-36228High
An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service.
- CVE-2020-36227High
A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.
- CVE-2020-36226High
A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.
- CVE-2020-36225High
A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
- CVE-2020-36224High
A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
- CVE-2020-36223High
A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).
- CVE-2020-36222High
A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.
- CVE-2020-36221High
An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).
Original NVD description (English source)
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS