CVE-2020-36230

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 26-01-2021 07:15

Last modified: - 30-04-2022 04:18

Total changes: - 11

Description

A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Low

Attack complexity

Network

Attack vector

High

Availability

None

Confidentiality

None

Integrity

None

Privileges required

Unchanged

Scope

None

User interaction

7.5

Base score

3.9

3.6

Exploitability score

Impact score

Verification logic

vendor=openldap AND product=openldap AND versionEndExcluding=2.4.57

vendor=Debian AND product=debian_linux AND version=9.0

vendor=Debian AND product=debian_linux AND version=10.0

vendor=apple AND product=mac_os_x AND versionStartIncluding=10.14.0 AND versionEndExcluding=10.14.6

vendor=apple AND product=mac_os_x AND version=10.14.6 AND update=-

vendor=apple AND product=mac_os_x AND version=10.14.6 AND update=security_update_2019-004

vendor=apple AND product=mac_os_x AND version=10.14.6 AND update=security_update_2019-005

vendor=apple AND product=mac_os_x AND version=10.14.6 AND update=security_update_2019-006

vendor=apple AND product=mac_os_x AND version=10.14.6 AND update=security_update_2019-007

vendor=apple AND product=mac_os_x AND version=10.14.6 AND update=security_update_2020-001

vendor=apple AND product=mac_os_x AND version=10.14.6 AND update=security_update_2020-002

vendor=apple AND product=mac_os_x AND version=10.14.6 AND update=security_update_2020-003

vendor=apple AND product=mac_os_x AND version=10.14.6 AND update=security_update_2020-004

vendor=apple AND product=mac_os_x AND version=10.14.6 AND update=security_update_2020-005

vendor=apple AND product=mac_os_x AND version=10.14.6 AND update=security_update_2020-006

vendor=apple AND product=mac_os_x AND version=10.14.6 AND update=security_update_2020-007

vendor=apple AND product=mac_os_x AND version=10.14.6 AND update=security_update_2021-001

vendor=apple AND product=mac_os_x AND version=10.14.6 AND update=security_update_2021-002

vendor=apple AND product=mac_os_x AND version=10.14.6 AND update=security_update_2021-003

vendor=apple AND product=mac_os_x AND version=10.14.6 AND update=supplemental_update

vendor=apple AND product=mac_os_x AND version=10.14.6 AND update=supplemental_update_2

vendor=apple AND product=macos AND versionStartIncluding=11.1 AND versionEndExcluding=11.4

vendor=apache AND product=bookkeeper AND version=4.12.1

Reference

https://git.openldap.org/openldap/openldap/-/tags/OPENLDAP_REL_ENG_2_4_57
https://bugs.openldap.org/show_bug.cgi?id=9423
https://git.openldap.org/openldap/openldap/-/commit/8c1d96ee36ed98b32cd0e28b7069c7b8ea09d793
[debian-lts-announce] 20210203 [SECURITY] [DLA 2544-1] openldap security update-Mailing List, Third Party Advisory
DSA-4845-Third Party Advisory
https://security.netapp.com/advisory/ntap-20210226-0002/
https://support.apple.com/kb/HT212529
https://support.apple.com/kb/HT212531
20210526 APPLE-SA-2021-05-25-2 macOS Big Sur 11.4-Mailing List, Third Party Advisory
20210526 APPLE-SA-2021-05-25-4 Security Update 2021-003 Catalina-Mailing List, Third Party Advisory
20210526 APPLE-SA-2021-05-25-3 Security Update 2021-004 Mojave-Mailing List, Third Party Advisory
https://support.apple.com/kb/HT212530
[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8-Mailing List, Third Party Advisory
[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8-Mailing List, Third Party Advisory

Keywords

CVE-2020-36230

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2020-36230

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures