CVE-2020-36227
HighCVSS 7.5Exploitation Probability (EPSS)
Very high risk100th percentile - higher than 100% of all known CVEs
Summary
A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.
Risk Assessment
An attacker can trigger an infinite loop in slapd, leading to resource exhaustion and unavailability of the directory service. This disrupts authentication and dependent services.
Recommendation
Update OpenLDAP to version 2.4.57 or later. Also restrict the ability of untrusted clients to perform cancel_extop operations.
Other vulnerabilities in OpenLDAP
See all- CVE-2020-36230High
A flaw in OpenLDAP before 2.4.57 leads to an assertion failure in slapd during X.509 DN parsing in decode.c (ber_next_element), resulting in denial of service.
- CVE-2020-36229High
A flaw was discovered in OpenLDAP before 2.4.57 in ldap_X509dn2bv leading to a slapd crash in X.509 DN parsing in ad_keystring, resulting in denial of service.
- CVE-2020-36228High
An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service.
- CVE-2020-36226High
A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.
- CVE-2020-36225High
A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
- CVE-2020-36224High
A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
- CVE-2020-36223High
A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).
- CVE-2020-36222High
A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.
- CVE-2020-36221High
An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).
- CVE-2020-12243High
In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).
Original NVD description (English source)
A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS