CVE-2020-36227High· 7.5▾ TwilightA flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 15.4 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
77%
A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.
openldap < 2.4.57debian_linux = 9.0debian_linux = 10.0macos >= 11.1, < 11.4Upgrade past the affected range:
openldap 2.4.57macos 11.4Connected by shared product, vendor, weakness, or advisory.
CVE-2021-27212High· 7.5In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp
CVE-2020-25710High· 7.5A flaw was found in OpenLDAP in versions before 2.4.56
CVE-2020-25709High· 7.5A flaw was found in OpenLDAP
CVE-2020-36229High· 7.5A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in ad_keystring, resulting in denial of service.
CVE-2020-36230High· 7.5A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service.
CVE-2020-36226High· 7.5A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.