CVE-2020-36228High· 7.5▾ TwilightAn integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 17 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
85%
An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service.
openldap < 2.4.57debian_linux = 9.0debian_linux = 10.0macos >= 11.1, < 11.4Upgrade past the affected range:
openldap 2.4.57macos 11.4Connected by shared product, vendor, weakness, or advisory.
CVE-2020-36221High· 7.5An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).
CVE-2021-27212High· 7.5In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp
CVE-2020-25710High· 7.5A flaw was found in OpenLDAP in versions before 2.4.56
CVE-2020-25709High· 7.5A flaw was found in OpenLDAP
CVE-2020-36229High· 7.5A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in ad_keystring, resulting in denial of service.
CVE-2020-36230High· 7.5A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service.