---
id: CVE-2020-25692
title: >-
  A NULL pointer dereference was found in OpenLDAP server and was fixed in
  openldap 2.4.55, during a request for renaming RDNs
summary: >-
  A NULL pointer dereference was found in OpenLDAP server and was fixed in
  openldap 2.4.55, during a request for renaming RDNs. An unauthenticated
  attacker could remotely crash the slapd process by sending a specially crafted
  request, caus…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-476
vendor: openldap
product: openldap
affected:
  - openldap < 2.4.55
  - enterprise_linux = 5.0
  - enterprise_linux = 6.0
  - enterprise_linux = 7.0
  - cloud_backup
  - solidfire_baseboard_management_controller_firmware
patched:
  - openldap 2.4.55
published: '2020-12-08'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T10:17:33.013'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2020-25692'
references:
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=1894567'
    label: secalert@redhat.com
  - url: 'https://security.netapp.com/advisory/ntap-20210108-0006/'
    label: secalert@redhat.com
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=1894567'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://security.netapp.com/advisory/ntap-20210108-0006/'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-398330.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
tags:
  - nvd
epss: 0.02209
epssPercentile: 0.82135
ingestedAt: '2026-10-14T10:25:41.181Z'
---

## Overview

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.

## Affected

- `openldap < 2.4.55`
- `enterprise_linux = 5.0`
- `enterprise_linux = 6.0`
- `enterprise_linux = 7.0`
- `cloud_backup`
- `solidfire_baseboard_management_controller_firmware`

## Remediation

Upgrade past the affected range:

- `openldap 2.4.55`