Every CVE Search/ Get API key

CVE-2020-25692

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during...

7.5 HighFix available

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

3.15%Up 2.4 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.5

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.

Record
CVE-2020-25692
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-476
Updated
2026-11-02
CVE List No score

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.

Record
CVE-2020-25692
Weakness
CWE-476
Updated
2026-11-02
EUVDEUVD-2020-18353 No score

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.

Record
EUVD-2020-18353
Updated
2026-11-02
GitHub AdvisoriesGHSA-73cr-r2gx-wgq6 7.5

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during...

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.

Record
GHSA-73cr-r2gx-wgq6
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
OSVALPINE-CVE-2020-25692 7.5

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.

Record
ALPINE-CVE-2020-25692
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 7.5

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.

Record
CVE-2020-25692
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 18 moreShow less
OSVDEBIAN-CVE-2020-25692 7.5

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.

Record
DEBIAN-CVE-2020-25692
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVJLSEC-2026-160 7.5

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.

Record
JLSEC-2026-160
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
OSVRHSA-2021:1389 7.5

Red Hat Security Advisory: openldap security update

Record
RHSA-2021:1389
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2020-25692 7.5

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.

Record
UBUNTU-CVE-2020-25692
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBIT-openldap-2020-25692 No score

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.

Record
BIT-openldap-2020-25692
Updated
2026-11-02
OSVCLSA-2025-1758636652 No score

openldap: Fix of 14 CVEs

  • Rebase to 2.4.58 to fix the following vulnerabilities:
  • CVE-2020-12243: fix denial of service caused by LDAP search filters with nested boolean expressions
  • CVE-2020-36221: fix integer underflow in the Certificate Exact Assertion processing
  • CVE-2020-36223: fix slapd crash in the Values Return Filter control handling
  • CVE-2020-36226: fix slapd crash in the saslAuthzTo processing
  • CVE-2020-36228: fix slapd crash in the Certificate List Exact Assertion processing
  • CVE-2020-36225: fix double free and slapd crash in the saslAuthzTo processing
  • CVE-2020-36227: fix infinite loop in slapd with the cancel_extop Cancel operation
  • CVE-2020-36230: fix assertion failure in slapd in the X.509 DN parsing in decode.c
  • CVE-2020-25692: fix NULL pointer dereference during a request for renaming RDNs
  • CVE-2020-25709: fix assertion failure caused by processing malicious packet
  • CVE-2020-36224: fix invalid pointer free and slapd crash in the saslAuthzTo processing
  • CVE-2020-36229: fix slapd crash in the X.509 DN parsing in ad_keystring
  • CVE-2020-25710: fix failed assertion in csnNormalize23()
  • CVE-2020-36222: fix assertion failure in slapd in the saslAuthzTo validation
Record
CLSA-2025-1758636652
Updated
2026-11-02
OSVCLSA-2025-1758645818 No score

openldap: Fix of 14 CVEs

  • Rebase to 2.4.58 to fix the following vulnerabilities:
  • CVE-2020-12243: fix denial of service caused by LDAP search filters with nested boolean expressions
  • CVE-2020-36221: fix integer underflow in the Certificate Exact Assertion processing
  • CVE-2020-36223: fix slapd crash in the Values Return Filter control handling
  • CVE-2020-36226: fix slapd crash in the saslAuthzTo processing
  • CVE-2020-36228: fix slapd crash in the Certificate List Exact Assertion processing
  • CVE-2020-36225: fix double free and slapd crash in the saslAuthzTo processing
  • CVE-2020-36227: fix infinite loop in slapd with the cancel_extop Cancel operation
  • CVE-2020-36230: fix assertion failure in slapd in the X.509 DN parsing in decode.c
  • CVE-2020-25692: fix NULL pointer dereference during a request for renaming RDNs
  • CVE-2020-25709: fix assertion failure caused by processing malicious packet
  • CVE-2020-36224: fix invalid pointer free and slapd crash in the saslAuthzTo processing
  • CVE-2020-36229: fix slapd crash in the X.509 DN parsing in ad_keystring
  • CVE-2020-25710: fix failed assertion in csnNormalize23()
  • CVE-2020-36222: fix assertion failure in slapd in the saslAuthzTo validation
Record
CLSA-2025-1758645818
Updated
2026-11-02
OSVCLSA-2026-1777310722 No score

openldap: Fix of 15 CVEs

  • CVE-2019-13565: SASL session encryption SSF not reset on new connection, allowing downgrade
  • CVE-2020-12243: slapd crash via deeply nested LDAP search filter boolean expressions
  • CVE-2020-25692: NULL pointer dereference in slapd during modRDN request
  • CVE-2020-25709: slapd assertion failure via crafted certificate list validation
  • CVE-2020-25710: slapd assertion failure in obsolete csnNormalize23
  • CVE-2020-36221: slapd integer underflow crash in Certificate Exact Assertion processing
  • CVE-2020-36222: slapd assertion failure in saslAuthzTo validation
  • CVE-2020-36223: slapd double free crash in Values Return Filter control handling
  • CVE-2020-36224: slapd invalid pointer free and crash in saslAuthzTo processing
  • CVE-2020-36225: slapd double free crash in saslAuthzTo processing
  • CVE-2020-36226: slapd memch->bv_len miscalculation and crash in saslAuthzTo processing
  • CVE-2020-36227: slapd infinite loop via cancel_extop Cancel operation
  • CVE-2020-36228: slapd integer underflow crash in Certificate List Exact Assertion processing
  • CVE-2020-36229: slapd crash in X.509 DN parsing ad_keystring via ldap_X509dn2bv
  • CVE-2020-36230: slapd assertion failure in X.509 DN parsing ber_next_element in decode.c
Record
CLSA-2026-1777310722
Updated
2026-11-02
OSVCLSA-2026-1777393215 No score

openldap: Fix of 15 CVEs

  • CVE-2019-13565: SASL session encryption SSF not reset on new connection, allowing downgrade
  • CVE-2020-12243: slapd crash via deeply nested LDAP search filter boolean expressions
  • CVE-2020-25692: NULL pointer dereference in slapd during modRDN request
  • CVE-2020-25709: slapd assertion failure via crafted certificate list validation
  • CVE-2020-25710: slapd assertion failure in obsolete csnNormalize23
  • CVE-2020-36221: slapd integer underflow crash in Certificate Exact Assertion processing
  • CVE-2020-36222: slapd assertion failure in saslAuthzTo validation
  • CVE-2020-36223: slapd double free crash in Values Return Filter control handling
  • CVE-2020-36224: slapd invalid pointer free and crash in saslAuthzTo processing
  • CVE-2020-36225: slapd double free crash in saslAuthzTo processing
  • CVE-2020-36226: slapd memch->bv_len miscalculation and crash in saslAuthzTo processing
  • CVE-2020-36227: slapd infinite loop via cancel_extop Cancel operation
  • CVE-2020-36228: slapd integer underflow crash in Certificate List Exact Assertion processing
  • CVE-2020-36229: slapd crash in X.509 DN parsing ad_keystring via ldap_X509dn2bv
  • CVE-2020-36230: slapd assertion failure in X.509 DN parsing ber_next_element in decode.c
Record
CLSA-2026-1777393215
Updated
2026-11-02
OSVMGASA-2020-0407 No score

Updated openldap packages fix a security vulnerability

A vulnerability in the handling of normalization with modrdn was discovered in OpenLDAP. An unauthenticated remote attacker can use this flaw to cause a denial of service (slapd daemon crash) via a specially crafted packet (CVE-2020-25692).

Also, the PID file path in the systemd service was fixed to use /run as the$ parent, rather than /var/run, eliminating warning messages in the logs.

Record
MGASA-2020-0407
Updated
2026-11-02
OSVopenSUSE-SU-2020:1918-1 No score

Security update for openldap2

This update for openldap2 fixes the following issues:

  • CVE-2020-25692: Fixed an unauthenticated remote denial of service due to incorrect validation of modrdn equality rules (bsc#1178387).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2020:1918-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:1920-1 No score

Security update for openldap2

This update for openldap2 fixes the following issues:

  • CVE-2020-25692: Fixed an unauthenticated remote denial of service due to incorrect validation of modrdn equality rules (bsc#1178387).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2020:1920-1
Updated
2026-11-02
OSVSUSE-SU-2020:14541-1 No score

Security update for openldap2

This update for openldap2 fixes the following issues:

  • CVE-2020-25692: Fixed an unauthenticated remote denial of service due to incorrect validation of modrdn equality rules (bsc#1178387).
Record
SUSE-SU-2020:14541-1
Updated
2026-11-02
OSVSUSE-SU-2020:3313-1 No score

Security update for openldap2

This update for openldap2 fixes the following issues:

  • CVE-2020-25692: Fixed an unauthenticated remote denial of service due to incorrect validation of modrdn equality rules (bsc#1178387).
Record
SUSE-SU-2020:3313-1
Updated
2026-11-02
OSVSUSE-SU-2020:3314-1 No score

Security update for openldap2

This update for openldap2 fixes the following issues:

  • CVE-2020-25692: Fixed an unauthenticated remote denial of service due to incorrect validation of modrdn equality rules (bsc#1178387).
Record
SUSE-SU-2020:3314-1
Updated
2026-11-02
OSVSUSE-SU-2020:3315-1 No score

Security update for openldap2

This update for openldap2 fixes the following issues:

  • CVE-2020-25692: Fixed an unauthenticated remote denial of service due to incorrect validation of modrdn equality rules (bsc#1178387).
Record
SUSE-SU-2020:3315-1
Updated
2026-11-02
OSVUSN-4622-1 No score

openldap vulnerability

It was discovered that OpenLDAP incorrectly handled certain network packets. A remote attacker could use this issue to cause OpenLDAP to crash, resulting in a denial of service, or possibly execute arbitrary code.

Record
USN-4622-1
Updated
2026-11-02
OSVUSN-4622-2 No score

openldap vulnerability

USN-4622-1 fixed a vulnerability in OpenLDAP. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.

Original advisory details:

It was discovered that OpenLDAP incorrectly handled certain network packets. A remote attacker could use this issue to cause OpenLDAP to crash, resulting in a denial of service, or possibly execute arbitrary code.

Record
USN-4622-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openldap
Alpine:v3.10
 before 2.4.48-r2
2.4.48-r2
openldap
Alpine:v3.11
 before 2.4.48-r3
2.4.48-r3
openldap
Alpine:v3.12
 before 2.4.50-r1
2.4.50-r1
openldap
Alpine:v3.9
 before 2.4.48-r2
2.4.48-r2
openldap
Bitnami
 before 2.4.55
2.4.55
openldap
TuxCare:OracleLinux:6
From an advisory covering 14 CVEs
 before 2.4.58-1.el6.tuxcare.els1
2.4.58-1.el6.tuxcare.els1
openldap-clients
TuxCare:OracleLinux:6
From an advisory covering 14 CVEs
 before 2.4.58-1.el6.tuxcare.els1
2.4.58-1.el6.tuxcare.els1
openldap-devel
TuxCare:OracleLinux:6
From an advisory covering 14 CVEs
 before 2.4.58-1.el6.tuxcare.els1
2.4.58-1.el6.tuxcare.els1
openldap-servers
TuxCare:OracleLinux:6
From an advisory covering 14 CVEs
 before 2.4.58-1.el6.tuxcare.els1
2.4.58-1.el6.tuxcare.els1
openldap-servers-sql
TuxCare:OracleLinux:6
From an advisory covering 14 CVEs
 before 2.4.58-1.el6.tuxcare.els1
2.4.58-1.el6.tuxcare.els1
Show 86 moreShow less
Affected packages
PackageAffectedFixed
openldap
TuxCare:CentOS:6
From an advisory covering 14 CVEs
 before 2.4.58-1.el6.tuxcare.els1
2.4.58-1.el6.tuxcare.els1
openldap-clients
TuxCare:CentOS:6
From an advisory covering 14 CVEs
 before 2.4.58-1.el6.tuxcare.els1
2.4.58-1.el6.tuxcare.els1
openldap-devel
TuxCare:CentOS:6
From an advisory covering 14 CVEs
 before 2.4.58-1.el6.tuxcare.els1
2.4.58-1.el6.tuxcare.els1
openldap-servers
TuxCare:CentOS:6
From an advisory covering 14 CVEs
 before 2.4.58-1.el6.tuxcare.els1
2.4.58-1.el6.tuxcare.els1
openldap-servers-sql
TuxCare:CentOS:6
From an advisory covering 14 CVEs
 before 2.4.58-1.el6.tuxcare.els1
2.4.58-1.el6.tuxcare.els1
openldap
TuxCare:CentOS:8.5
From an advisory covering 15 CVEs
 before 2.4.46-18.el8.tuxcare.els4
2.4.46-18.el8.tuxcare.els4
openldap-clients
TuxCare:CentOS:8.5
From an advisory covering 15 CVEs
 before 2.4.46-18.el8.tuxcare.els4
2.4.46-18.el8.tuxcare.els4
openldap-devel
TuxCare:CentOS:8.5
From an advisory covering 15 CVEs
 before 2.4.46-18.el8.tuxcare.els4
2.4.46-18.el8.tuxcare.els4
openldap-servers
TuxCare:CentOS:8.5
From an advisory covering 15 CVEs
 before 2.4.46-18.el8.tuxcare.els4
2.4.46-18.el8.tuxcare.els4
openldap
TuxCare:CentOS:8.4
From an advisory covering 15 CVEs
 before 2.4.46-17.el8_4.tuxcare.els4
2.4.46-17.el8_4.tuxcare.els4
openldap-clients
TuxCare:CentOS:8.4
From an advisory covering 15 CVEs
 before 2.4.46-17.el8_4.tuxcare.els4
2.4.46-17.el8_4.tuxcare.els4
openldap-devel
TuxCare:CentOS:8.4
From an advisory covering 15 CVEs
 before 2.4.46-17.el8_4.tuxcare.els4
2.4.46-17.el8_4.tuxcare.els4
openldap-servers
TuxCare:CentOS:8.4
From an advisory covering 15 CVEs
 before 2.4.46-17.el8_4.tuxcare.els4
2.4.46-17.el8_4.tuxcare.els4
openldap
Debian:12
 before 2.4.55+dfsg-1
2.4.55+dfsg-1
openldap
Debian:13
 before 2.4.55+dfsg-1
2.4.55+dfsg-1
openldap
Debian:14
 before 2.4.55+dfsg-1
2.4.55+dfsg-1
openldap
Debian:9
 before 2.4.44+dfsg-5+deb9u5, plus listed versions
2.4.44+dfsg-52.4.44+dfsg-5+deb9u12.4.44+dfsg-5+deb9u1~bpo8+12.4.44+dfsg-5+deb9u22.4.44+dfsg-5+deb9u32.4.44+dfsg-5+deb9u4
2.4.44+dfsg-5+deb9u5
openldap
Debian:10
 before 2.4.47+dfsg-3+deb10u3, plus listed versions
2.4.47+dfsg-32.4.47+dfsg-3+deb10u12.4.47+dfsg-3+deb10u1~bpo9+12.4.47+dfsg-3+deb10u22.4.47+dfsg-3+deb10u2~bpo9+1
2.4.47+dfsg-3+deb10u3
OpenLDAPClient_jll
Julia
 before 2.5.14+0
2.5.14+0
openldap
Mageia:7
 before 2.4.50-1.2.mga7
2.4.50-1.2.mga7
openldap
Red Hat:enterprise_linux:7::client
 before 0:2.4.44-23.el7_9
0:2.4.44-23.el7_9
openldap-clients
Red Hat:enterprise_linux:7::client
 before 0:2.4.44-23.el7_9
0:2.4.44-23.el7_9
openldap-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:2.4.44-23.el7_9
0:2.4.44-23.el7_9
openldap-devel
Red Hat:enterprise_linux:7::client
 before 0:2.4.44-23.el7_9
0:2.4.44-23.el7_9
openldap-servers
Red Hat:enterprise_linux:7::client
 before 0:2.4.44-23.el7_9
0:2.4.44-23.el7_9
openldap-servers-sql
Red Hat:enterprise_linux:7::client
 before 0:2.4.44-23.el7_9
0:2.4.44-23.el7_9
openldap-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:2.4.44-23.el7_9
0:2.4.44-23.el7_9
openldap-devel
Red Hat:enterprise_linux:7::computenode
 before 0:2.4.44-23.el7_9
0:2.4.44-23.el7_9
openldap-servers
Red Hat:enterprise_linux:7::computenode
 before 0:2.4.44-23.el7_9
0:2.4.44-23.el7_9
openldap-servers-sql
Red Hat:enterprise_linux:7::computenode
 before 0:2.4.44-23.el7_9
0:2.4.44-23.el7_9
openldap
Red Hat:enterprise_linux:7::server
 before 0:2.4.44-23.el7_9
0:2.4.44-23.el7_9
openldap-clients
Red Hat:enterprise_linux:7::server
 before 0:2.4.44-23.el7_9
0:2.4.44-23.el7_9
openldap-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:2.4.44-23.el7_9
0:2.4.44-23.el7_9
openldap-devel
Red Hat:enterprise_linux:7::server
 before 0:2.4.44-23.el7_9
0:2.4.44-23.el7_9
openldap-servers
Red Hat:enterprise_linux:7::server
 before 0:2.4.44-23.el7_9
0:2.4.44-23.el7_9
openldap-servers-sql
Red Hat:enterprise_linux:7::server
 before 0:2.4.44-23.el7_9
0:2.4.44-23.el7_9
openldap
Red Hat:enterprise_linux:7::workstation
 before 0:2.4.44-23.el7_9
0:2.4.44-23.el7_9
openldap-clients
Red Hat:enterprise_linux:7::workstation
 before 0:2.4.44-23.el7_9
0:2.4.44-23.el7_9
openldap-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:2.4.44-23.el7_9
0:2.4.44-23.el7_9
openldap-devel
Red Hat:enterprise_linux:7::workstation
 before 0:2.4.44-23.el7_9
0:2.4.44-23.el7_9
openldap-servers
Red Hat:enterprise_linux:7::workstation
 before 0:2.4.44-23.el7_9
0:2.4.44-23.el7_9
openldap-servers-sql
Red Hat:enterprise_linux:7::workstation
 before 0:2.4.44-23.el7_9
0:2.4.44-23.el7_9
openldap2-client-openssl1
SUSE:Linux Enterprise Server 11-SECURITY
 before 2.4.26-0.74.16.1
2.4.26-0.74.16.1
openldap2
SUSE:Linux Enterprise Point of Sale 11 SP3
 before 2.4.26-0.74.16.1
2.4.26-0.74.16.1
openldap2-client
SUSE:Linux Enterprise Point of Sale 11 SP3
 before 2.4.26-0.74.16.1
2.4.26-0.74.16.1
openldap2
SUSE:Linux Enterprise Server 11 SP4-LTSS
 before 2.4.26-0.74.16.1
2.4.26-0.74.16.1
openldap2-client
SUSE:Linux Enterprise Server 11 SP4-LTSS
 before 2.4.26-0.74.16.1
2.4.26-0.74.16.1
openldap2
SUSE:Linux Enterprise Module for Basesystem 15 SP1
 before 2.4.46-9.40.1
2.4.46-9.40.1
openldap2
SUSE:Linux Enterprise Module for Basesystem 15 SP2
 before 2.4.46-9.40.1
2.4.46-9.40.1
openldap2
SUSE:Linux Enterprise Module for Development Tools 15 SP1
 before 2.4.46-9.40.1
2.4.46-9.40.1
openldap2
SUSE:Linux Enterprise Module for Development Tools 15 SP2
 before 2.4.46-9.40.1
2.4.46-9.40.1
openldap2
SUSE:Linux Enterprise Module for Legacy 15 SP1
 before 2.4.46-9.40.1
2.4.46-9.40.1
openldap2
SUSE:Linux Enterprise Module for Legacy 15 SP2
 before 2.4.46-9.40.1
2.4.46-9.40.1
openldap2
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
 before 2.4.46-9.40.1
2.4.46-9.40.1
openldap2
SUSE:Linux Enterprise High Performance Computing 15-LTSS
 before 2.4.46-9.40.1
2.4.46-9.40.1
openldap2
SUSE:Linux Enterprise Server 15-LTSS
 before 2.4.46-9.40.1
2.4.46-9.40.1
openldap2
SUSE:Linux Enterprise Server for SAP Applications 15
 before 2.4.46-9.40.1
2.4.46-9.40.1
openldap2
SUSE:HPE Helion OpenStack 8
 before 2.4.41-18.77.1
2.4.41-18.77.1
openldap2
SUSE:OpenStack Cloud 7
 before 2.4.41-18.77.1
2.4.41-18.77.1
openldap2
SUSE:OpenStack Cloud 8
 before 2.4.41-18.77.1
2.4.41-18.77.1
openldap2
SUSE:OpenStack Cloud 9
 before 2.4.41-18.77.1
2.4.41-18.77.1
openldap2
SUSE:OpenStack Cloud Crowbar 8
 before 2.4.41-18.77.1
2.4.41-18.77.1
openldap2
SUSE:OpenStack Cloud Crowbar 9
 before 2.4.41-18.77.1
2.4.41-18.77.1
openldap2
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 2.4.41-18.77.1
2.4.41-18.77.1
openldap2
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 2.4.41-18.77.1
2.4.41-18.77.1
openldap2
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 2.4.41-18.77.1
2.4.41-18.77.1
openldap2
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 2.4.41-18.77.1
2.4.41-18.77.1
openldap2
SUSE:Linux Enterprise Server 12 SP2-LTSS
 before 2.4.41-18.77.1
2.4.41-18.77.1
openldap2
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 2.4.41-18.77.1
2.4.41-18.77.1
openldap2
SUSE:Linux Enterprise Server 12 SP3-LTSS
 before 2.4.41-18.77.1
2.4.41-18.77.1
openldap2
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 2.4.41-18.77.1
2.4.41-18.77.1
openldap2
SUSE:Linux Enterprise Server 12 SP4-LTSS
 before 2.4.41-18.77.1
2.4.41-18.77.1
openldap2
SUSE:Linux Enterprise Server 12 SP5
 before 2.4.41-18.77.1
2.4.41-18.77.1
openldap2
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 2.4.41-18.77.1
2.4.41-18.77.1
openldap2
SUSE:Enterprise Storage 5
 before 2.4.41-18.77.1
2.4.41-18.77.1
openldap2
SUSE:Linux Enterprise Module for Legacy 12
 before 2.4.41-18.24.23.1
2.4.41-18.24.23.1
openldap2
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 2.4.41-18.24.23.1
2.4.41-18.24.23.1
openldap2
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 2.4.41-18.24.23.1
2.4.41-18.24.23.1
openldap2
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 2.4.41-18.24.23.1
2.4.41-18.24.23.1
openldap2
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 2.4.41-18.24.23.1
2.4.41-18.24.23.1
openldap
Ubuntu:Pro:14.04:LTS
 before 2.4.31-1+nmu2ubuntu8.5+esm3, plus listed versions
2.4.31-1+nmu2ubuntu32.4.31-1+nmu2ubuntu42.4.31-1+nmu2ubuntu52.4.31-1+nmu2ubuntu82.4.31-1+nmu2ubuntu8.1
Show 6 moreShow less
2.4.31-1+nmu2ubuntu8.22.4.31-1+nmu2ubuntu8.32.4.31-1+nmu2ubuntu8.42.4.31-1+nmu2ubuntu8.52.4.31-1+nmu2ubuntu8.5+esm12.4.31-1+nmu2ubuntu8.5+esm2
2.4.31-1+nmu2ubuntu8.5+esm3
openldap
Ubuntu:16.04:LTS
 before 2.4.42+dfsg-2ubuntu3.10, plus listed versions
2.4.41+dfsg-1ubuntu22.4.41+dfsg-1ubuntu32.4.42+dfsg-2ubuntu12.4.42+dfsg-2ubuntu32.4.42+dfsg-2ubuntu3.1
Show 8 moreShow less
2.4.42+dfsg-2ubuntu3.22.4.42+dfsg-2ubuntu3.32.4.42+dfsg-2ubuntu3.42.4.42+dfsg-2ubuntu3.52.4.42+dfsg-2ubuntu3.62.4.42+dfsg-2ubuntu3.72.4.42+dfsg-2ubuntu3.82.4.42+dfsg-2ubuntu3.9
2.4.42+dfsg-2ubuntu3.10
openldap
Ubuntu:18.04:LTS
 before 2.4.45+dfsg-1ubuntu1.7, plus listed versions
2.4.45+dfsg-1ubuntu12.4.45+dfsg-1ubuntu1.12.4.45+dfsg-1ubuntu1.22.4.45+dfsg-1ubuntu1.32.4.45+dfsg-1ubuntu1.42.4.45+dfsg-1ubuntu1.52.4.45+dfsg-1ubuntu1.6
2.4.45+dfsg-1ubuntu1.7
openldap
Ubuntu:20.04:LTS
 before 2.4.49+dfsg-2ubuntu1.4, plus listed versions
2.4.48+dfsg-1ubuntu12.4.48+dfsg-1ubuntu22.4.48+dfsg-1ubuntu32.4.48+dfsg-1ubuntu42.4.49+dfsg-1ubuntu12.4.49+dfsg-2ubuntu12.4.49+dfsg-2ubuntu1.22.4.49+dfsg-2ubuntu1.3
2.4.49+dfsg-2ubuntu1.4
openldap2
openSUSE:Leap 15.2
 before 2.4.46-lp152.14.12.1
2.4.46-lp152.14.12.1
openldap2
openSUSE:Leap 15.1
 before 2.4.46-lp151.10.21.1
2.4.46-lp151.10.21.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-25692 is a high vulnerability (CVSS 7.5) in Openldap, published October 30, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.15%, the 88th percentile. Fixed in openldap 2.4.48-r2.

References

Show 25 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open