CVE-2020-36225
HighCVSS 7.5Exploitation Probability (EPSS)
Very high risk91th percentile - higher than 91% of all known CVEs
Summary
A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
Risk Assessment
The vulnerability allows remote triggering of LDAP server crashes, potentially leading to unavailability of directory services and disruption of LDAP-dependent applications.
Recommendation
Upgrade OpenLDAP to version 2.4.57 or later immediately to prevent crashes caused by this vulnerability.
Other vulnerabilities in OpenLDAP
See all- CVE-2020-36230High
A flaw in OpenLDAP before 2.4.57 leads to an assertion failure in slapd during X.509 DN parsing in decode.c (ber_next_element), resulting in denial of service.
- CVE-2020-36229High
A flaw was discovered in OpenLDAP before 2.4.57 in ldap_X509dn2bv leading to a slapd crash in X.509 DN parsing in ad_keystring, resulting in denial of service.
- CVE-2020-36228High
An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service.
- CVE-2020-36227High
A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.
- CVE-2020-36226High
A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.
- CVE-2020-36224High
A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
- CVE-2020-36223High
A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).
- CVE-2020-36222High
A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.
- CVE-2020-36221High
An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).
- CVE-2020-12243High
In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).
Original NVD description (English source)
A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS