CVE-2020-25709

HIGH

OpenLDAP < 2.4.56 - Denial of Service via Assertion Failure

Title source: llm
STIX 2.1

Description

A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.

References (8)

Core 8
Core References
Third Party Advisory vendor-advisory x_refsource_debian
https://www.debian.org/security/2020/dsa-4792
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2020/12/msg00008.html
Third Party Advisory x_refsource_confirm
https://support.apple.com/kb/HT212147
Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2021/Feb/14
Issue Tracking, Patch, Third Party Advisory x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=1899675
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20210716-0003/

Scores

CVSS v3 7.5
EPSS 0.3568
EPSS Percentile 97.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-617
Status published
Products (8)
apple/mac_os_x 10.14.6 (12 CPE variants)
apple/mac_os_x 10.15.7 (4 CPE variants)
apple/mac_os_x 10.14.0 - 10.14.6
apple/macos 11.0 - 11.0.1
debian/debian_linux 9.0
debian/debian_linux 10.0
openldap/openldap < 2.4.56
redhat/jboss_core_services
Published May 18, 2021
Tracked Since Feb 18, 2026