CVE-2020-25710
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a...
7.5 HighFix available
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
2.73%Up 1.7 points since May 29, 2021
What each source reports
NVD Score used
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.
- Record
CVE-2020-25710- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-617
- Updated
- 2026-11-02
CVE List No score
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.
- Record
CVE-2020-25710- Weakness
- CWE-617
- Updated
- 2026-11-02
EUVDEUVD-2020-18365 No score
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.
- Record
EUVD-2020-18365- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-8wg3-gqcw-9fq9
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a...
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.
- Record
GHSA-8wg3-gqcw-9fq9- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-617
- Updated
- 2026-11-02
OSVALPINE-CVE-2020-25710
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.
- Record
ALPINE-CVE-2020-25710- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVBELL-CVE-2020-25710
CVE-2020-25710 does not affect BellSoft software
- Record
BELL-CVE-2020-25710- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 20 moreShow less
OSV
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.
- Record
CVE-2020-25710- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2020-25710
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.
- Record
DEBIAN-CVE-2020-25710- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVJLSEC-2026-162
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.
- Record
JLSEC-2026-162- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
OSVOESA-2021-1244
openldap security update
OpenLDAP is an open source suite of LDAP (Lightweight Directory Access Protocol) applications and development tools. LDAP is a set of protocols for accessing directory services (usually phone book style information, but other information is possible) over the Internet, similar to the way DNS (Domain Name System) information is propagated over the Internet. The openldap package contains configuration files, libraries, and documentation for OpenLDAP.
Security Fix(es):
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.(CVE-2020-25710)
- Record
OESA-2021-1244- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2022:0621
Red Hat Security Advisory: openldap security update
- Record
RHSA-2022:0621- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-25710
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.
- Record
UBUNTU-CVE-2020-25710- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVBIT-openldap-2020-25710 No score
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.
- Record
BIT-openldap-2020-25710- Updated
- 2026-11-02
OSVCLSA-2025-1758636652 No score
openldap: Fix of 14 CVEs
- Rebase to 2.4.58 to fix the following vulnerabilities:
- CVE-2020-12243: fix denial of service caused by LDAP search filters with nested boolean expressions
- CVE-2020-36221: fix integer underflow in the Certificate Exact Assertion processing
- CVE-2020-36223: fix slapd crash in the Values Return Filter control handling
- CVE-2020-36226: fix slapd crash in the saslAuthzTo processing
- CVE-2020-36228: fix slapd crash in the Certificate List Exact Assertion processing
- CVE-2020-36225: fix double free and slapd crash in the saslAuthzTo processing
- CVE-2020-36227: fix infinite loop in slapd with the cancel_extop Cancel operation
- CVE-2020-36230: fix assertion failure in slapd in the X.509 DN parsing in decode.c
- CVE-2020-25692: fix NULL pointer dereference during a request for renaming RDNs
- CVE-2020-25709: fix assertion failure caused by processing malicious packet
- CVE-2020-36224: fix invalid pointer free and slapd crash in the saslAuthzTo processing
- CVE-2020-36229: fix slapd crash in the X.509 DN parsing in ad_keystring
- CVE-2020-25710: fix failed assertion in csnNormalize23()
- CVE-2020-36222: fix assertion failure in slapd in the saslAuthzTo validation
- Record
CLSA-2025-1758636652- Updated
- 2026-11-02
OSVCLSA-2025-1758645818 No score
openldap: Fix of 14 CVEs
- Rebase to 2.4.58 to fix the following vulnerabilities:
- CVE-2020-12243: fix denial of service caused by LDAP search filters with nested boolean expressions
- CVE-2020-36221: fix integer underflow in the Certificate Exact Assertion processing
- CVE-2020-36223: fix slapd crash in the Values Return Filter control handling
- CVE-2020-36226: fix slapd crash in the saslAuthzTo processing
- CVE-2020-36228: fix slapd crash in the Certificate List Exact Assertion processing
- CVE-2020-36225: fix double free and slapd crash in the saslAuthzTo processing
- CVE-2020-36227: fix infinite loop in slapd with the cancel_extop Cancel operation
- CVE-2020-36230: fix assertion failure in slapd in the X.509 DN parsing in decode.c
- CVE-2020-25692: fix NULL pointer dereference during a request for renaming RDNs
- CVE-2020-25709: fix assertion failure caused by processing malicious packet
- CVE-2020-36224: fix invalid pointer free and slapd crash in the saslAuthzTo processing
- CVE-2020-36229: fix slapd crash in the X.509 DN parsing in ad_keystring
- CVE-2020-25710: fix failed assertion in csnNormalize23()
- CVE-2020-36222: fix assertion failure in slapd in the saslAuthzTo validation
- Record
CLSA-2025-1758645818- Updated
- 2026-11-02
OSVCLSA-2026-1777310722 No score
openldap: Fix of 15 CVEs
- CVE-2019-13565: SASL session encryption SSF not reset on new connection, allowing downgrade
- CVE-2020-12243: slapd crash via deeply nested LDAP search filter boolean expressions
- CVE-2020-25692: NULL pointer dereference in slapd during modRDN request
- CVE-2020-25709: slapd assertion failure via crafted certificate list validation
- CVE-2020-25710: slapd assertion failure in obsolete csnNormalize23
- CVE-2020-36221: slapd integer underflow crash in Certificate Exact Assertion processing
- CVE-2020-36222: slapd assertion failure in saslAuthzTo validation
- CVE-2020-36223: slapd double free crash in Values Return Filter control handling
- CVE-2020-36224: slapd invalid pointer free and crash in saslAuthzTo processing
- CVE-2020-36225: slapd double free crash in saslAuthzTo processing
- CVE-2020-36226: slapd memch->bv_len miscalculation and crash in saslAuthzTo processing
- CVE-2020-36227: slapd infinite loop via cancel_extop Cancel operation
- CVE-2020-36228: slapd integer underflow crash in Certificate List Exact Assertion processing
- CVE-2020-36229: slapd crash in X.509 DN parsing ad_keystring via ldap_X509dn2bv
- CVE-2020-36230: slapd assertion failure in X.509 DN parsing ber_next_element in decode.c
- Record
CLSA-2026-1777310722- Updated
- 2026-11-02
OSVCLSA-2026-1777393215 No score
openldap: Fix of 15 CVEs
- CVE-2019-13565: SASL session encryption SSF not reset on new connection, allowing downgrade
- CVE-2020-12243: slapd crash via deeply nested LDAP search filter boolean expressions
- CVE-2020-25692: NULL pointer dereference in slapd during modRDN request
- CVE-2020-25709: slapd assertion failure via crafted certificate list validation
- CVE-2020-25710: slapd assertion failure in obsolete csnNormalize23
- CVE-2020-36221: slapd integer underflow crash in Certificate Exact Assertion processing
- CVE-2020-36222: slapd assertion failure in saslAuthzTo validation
- CVE-2020-36223: slapd double free crash in Values Return Filter control handling
- CVE-2020-36224: slapd invalid pointer free and crash in saslAuthzTo processing
- CVE-2020-36225: slapd double free crash in saslAuthzTo processing
- CVE-2020-36226: slapd memch->bv_len miscalculation and crash in saslAuthzTo processing
- CVE-2020-36227: slapd infinite loop via cancel_extop Cancel operation
- CVE-2020-36228: slapd integer underflow crash in Certificate List Exact Assertion processing
- CVE-2020-36229: slapd crash in X.509 DN parsing ad_keystring via ldap_X509dn2bv
- CVE-2020-36230: slapd assertion failure in X.509 DN parsing ber_next_element in decode.c
- Record
CLSA-2026-1777393215- Updated
- 2026-11-02
OSVMGASA-2021-0046 No score
Updated openldap packages fix security vulnerabilities
It was discovered that OpenLDAP incorrectly handled certain malformed inputs. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service (CVE-2020-25709, CVE-2020-25710).
- Record
MGASA-2021-0046- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:0102-1 No score
Security update for openldap2
This update for openldap2 fixes the following issues:
Security issues fixed:
- CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909).
- CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909).
Non-security issue fixed:
- Retry binds in the LDAP backend when the remote LDAP server disconnected the (idle) LDAP connection. (bsc#1179503)
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2021:0102-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:0107-1 No score
Security update for openldap2
This update for openldap2 fixes the following issues:
Security issues fixed:
- CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909).
- CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909).
Non-security issue fixed:
- Retry binds in the LDAP backend when the remote LDAP server disconnected the (idle) LDAP connection. (bsc#1179503)
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2021:0107-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:0128-1 No score
Security update for openldap2
This update for openldap2 fixes the following issues:
- CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909).
- CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909).
- Record
SUSE-SU-2021:0128-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:0129-1 No score
Security update for openldap2
This update for openldap2 fixes the following issues:
Security issues fixed:
- CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909).
- CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909).
Non-security issue fixed:
- Retry binds in the LDAP backend when the remote LDAP server disconnected the (idle) LDAP connection. (bsc#1179503)
- Record
SUSE-SU-2021:0129-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:0142-1 No score
Security update for openldap2
This update for openldap2 fixes the following issues:
- CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909).
- CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909).
- Record
SUSE-SU-2021:0142-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:14597-1 No score
Security update for openldap2
This update for openldap2 fixes the following issues:
- CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909).
- CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909).
- Record
SUSE-SU-2021:14597-1- Updated
- 2026-11-02
OSVUSN-4634-1 No score
openldap vulnerabilities
It was discovered that OpenLDAP incorrectly handled certain malformed inputs. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service.
- Record
USN-4634-1- Updated
- 2026-11-02
OSVUSN-4634-2 No score
openldap vulnerabilities
USN-4634-1 fixed several vulnerabilities in OpenLDAP. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.
Original advisory details:
It was discovered that OpenLDAP incorrectly handled certain malformed inputs. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service.
- Record
USN-4634-2- Updated
- 2026-11-02
Affected products
- openldap
- openldap foundation openldap
- debian linux
- fedoraproject fedora
- redhat enterprise linux
- redhat jboss core services
- redhat jboss enterprise application platform
- redhat jboss enterprise web server
- siemens simatic s7-1500 cpu 1518-4 pn/dp mfp
- siemens simatic s7-1500 cpu 1518f-4 pn/dp mfp
- siemens siplus s7-1500 cpu 1518-4 pn/dp mfp
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openldapAlpine:v3.10 |
before 2.4.48-r2 | 2.4.48-r2 |
openldapAlpine:v3.11 |
before 2.4.48-r3 | 2.4.48-r3 |
openldapAlpine:v3.12 |
before 2.4.50-r1 | 2.4.50-r1 |
openldapAlpine:v3.13 |
before 2.4.56-r0 | 2.4.56-r0 |
openldapAlpine:v3.14 |
before 2.4.56-r0 | 2.4.56-r0 |
openldapAlpine:v3.15 |
before 2.4.56-r0 | 2.4.56-r0 |
openldapAlpine:v3.16 |
before 2.4.56-r0 | 2.4.56-r0 |
openldapAlpine:v3.17 |
before 2.4.56-r0 | 2.4.56-r0 |
openldapAlpine:v3.18 |
before 2.4.56-r0 | 2.4.56-r0 |
openldapAlpine:v3.19 |
before 2.4.56-r0 | 2.4.56-r0 |
Show 77 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openldapAlpine:v3.20 |
before 2.4.56-r0 | 2.4.56-r0 |
openldapAlpine:v3.21 |
before 2.4.56-r0 | 2.4.56-r0 |
openldapAlpine:v3.22 |
before 2.4.56-r0 | 2.4.56-r0 |
openldapAlpine:v3.23 |
before 2.4.56-r0 | 2.4.56-r0 |
openldapAlpine:v3.24 |
before 2.4.56-r0 | 2.4.56-r0 |
openldapAlpine:v3.9 |
before 2.4.48-r2 | 2.4.48-r2 |
openldapBitnami |
before 2.4.56 | 2.4.56 |
openldapTuxCare:OracleLinux:6 From an advisory covering 14 CVEs |
before 2.4.58-1.el6.tuxcare.els1 | 2.4.58-1.el6.tuxcare.els1 |
openldap-clientsTuxCare:OracleLinux:6 From an advisory covering 14 CVEs |
before 2.4.58-1.el6.tuxcare.els1 | 2.4.58-1.el6.tuxcare.els1 |
openldap-develTuxCare:OracleLinux:6 From an advisory covering 14 CVEs |
before 2.4.58-1.el6.tuxcare.els1 | 2.4.58-1.el6.tuxcare.els1 |
openldap-serversTuxCare:OracleLinux:6 From an advisory covering 14 CVEs |
before 2.4.58-1.el6.tuxcare.els1 | 2.4.58-1.el6.tuxcare.els1 |
openldap-servers-sqlTuxCare:OracleLinux:6 From an advisory covering 14 CVEs |
before 2.4.58-1.el6.tuxcare.els1 | 2.4.58-1.el6.tuxcare.els1 |
openldapTuxCare:CentOS:6 From an advisory covering 14 CVEs |
before 2.4.58-1.el6.tuxcare.els1 | 2.4.58-1.el6.tuxcare.els1 |
openldap-clientsTuxCare:CentOS:6 From an advisory covering 14 CVEs |
before 2.4.58-1.el6.tuxcare.els1 | 2.4.58-1.el6.tuxcare.els1 |
openldap-develTuxCare:CentOS:6 From an advisory covering 14 CVEs |
before 2.4.58-1.el6.tuxcare.els1 | 2.4.58-1.el6.tuxcare.els1 |
openldap-serversTuxCare:CentOS:6 From an advisory covering 14 CVEs |
before 2.4.58-1.el6.tuxcare.els1 | 2.4.58-1.el6.tuxcare.els1 |
openldap-servers-sqlTuxCare:CentOS:6 From an advisory covering 14 CVEs |
before 2.4.58-1.el6.tuxcare.els1 | 2.4.58-1.el6.tuxcare.els1 |
openldapTuxCare:CentOS:8.5 From an advisory covering 15 CVEs |
before 2.4.46-18.el8.tuxcare.els4 | 2.4.46-18.el8.tuxcare.els4 |
openldap-clientsTuxCare:CentOS:8.5 From an advisory covering 15 CVEs |
before 2.4.46-18.el8.tuxcare.els4 | 2.4.46-18.el8.tuxcare.els4 |
openldap-develTuxCare:CentOS:8.5 From an advisory covering 15 CVEs |
before 2.4.46-18.el8.tuxcare.els4 | 2.4.46-18.el8.tuxcare.els4 |
openldap-serversTuxCare:CentOS:8.5 From an advisory covering 15 CVEs |
before 2.4.46-18.el8.tuxcare.els4 | 2.4.46-18.el8.tuxcare.els4 |
openldapTuxCare:CentOS:8.4 From an advisory covering 15 CVEs |
before 2.4.46-17.el8_4.tuxcare.els4 | 2.4.46-17.el8_4.tuxcare.els4 |
openldap-clientsTuxCare:CentOS:8.4 From an advisory covering 15 CVEs |
before 2.4.46-17.el8_4.tuxcare.els4 | 2.4.46-17.el8_4.tuxcare.els4 |
openldap-develTuxCare:CentOS:8.4 From an advisory covering 15 CVEs |
before 2.4.46-17.el8_4.tuxcare.els4 | 2.4.46-17.el8_4.tuxcare.els4 |
openldap-serversTuxCare:CentOS:8.4 From an advisory covering 15 CVEs |
before 2.4.46-17.el8_4.tuxcare.els4 | 2.4.46-17.el8_4.tuxcare.els4 |
openldapDebian:12 |
before 2.4.56+dfsg-1 | 2.4.56+dfsg-1 |
openldapDebian:13 |
before 2.4.56+dfsg-1 | 2.4.56+dfsg-1 |
openldapDebian:14 |
before 2.4.56+dfsg-1 | 2.4.56+dfsg-1 |
openldapDebian:9 From an advisory covering 2 CVEs |
before 2.4.44+dfsg-5+deb9u6, plus listed versions 2.4.44+dfsg-52.4.44+dfsg-5+deb9u12.4.44+dfsg-5+deb9u1~bpo8+12.4.44+dfsg-5+deb9u22.4.44+dfsg-5+deb9u32.4.44+dfsg-5+deb9u42.4.44+dfsg-5+deb9u5 |
2.4.44+dfsg-5+deb9u6 |
openldapDebian:10 From an advisory covering 2 CVEs |
before 2.4.47+dfsg-3+deb10u4, plus listed versions 2.4.47+dfsg-32.4.47+dfsg-3+deb10u12.4.47+dfsg-3+deb10u1~bpo9+12.4.47+dfsg-3+deb10u22.4.47+dfsg-3+deb10u2~bpo9+12.4.47+dfsg-3+deb10u3 |
2.4.47+dfsg-3+deb10u4 |
OpenLDAPClient_jllJulia |
before 2.5.14+0 | 2.5.14+0 |
openldapMageia:7 From an advisory covering 2 CVEs |
before 2.4.50-1.3.mga7 | 2.4.50-1.3.mga7 |
openldapopenEuler:20.03-LTS-SP1 |
before 2.4.50-6.oe1 | 2.4.50-6.oe1 |
openldapRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-clientsRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-develRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-serversRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-servers-sqlRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-develRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-serversRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-servers-sqlRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldapRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-clientsRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-develRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-serversRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-servers-sqlRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldapRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-clientsRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-develRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-serversRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-servers-sqlRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap2SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 2 CVEs |
before 2.4.41-18.80.1 | 2.4.41-18.80.1 |
openldap2SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 2 CVEs |
before 2.4.41-18.80.1 | 2.4.41-18.80.1 |
openldap2SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 2 CVEs |
before 2.4.41-18.80.1 | 2.4.41-18.80.1 |
openldap2SUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 2 CVEs |
before 2.4.46-9.45.1 | 2.4.46-9.45.1 |
openldap2SUSE:Linux Enterprise Module for Development Tools 15 SP2 From an advisory covering 2 CVEs |
before 2.4.46-9.45.1 | 2.4.46-9.45.1 |
openldap2SUSE:Linux Enterprise Module for Legacy 15 SP2 From an advisory covering 2 CVEs |
before 2.4.46-9.45.1 | 2.4.46-9.45.1 |
openldap2SUSE:Linux Enterprise Module for Legacy 12 From an advisory covering 2 CVEs |
before 2.4.41-18.24.26.1 | 2.4.41-18.24.26.1 |
openldap2SUSE:Linux Enterprise Server for SAP Applications 12 SP2 From an advisory covering 2 CVEs |
before 2.4.41-18.24.26.1 | 2.4.41-18.24.26.1 |
openldap2SUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 2 CVEs |
before 2.4.41-18.24.26.1 | 2.4.41-18.24.26.1 |
openldap2SUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 2 CVEs |
before 2.4.41-18.24.26.1 | 2.4.41-18.24.26.1 |
openldap2SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 2 CVEs |
before 2.4.41-18.24.26.1 | 2.4.41-18.24.26.1 |
openldap2-client-openssl1SUSE:Linux Enterprise Server 11-SECURITY From an advisory covering 2 CVEs |
before 2.4.26-0.74.19.1 | 2.4.26-0.74.19.1 |
openldapUbuntu:Pro:14.04:LTS |
before 2.4.31-1+nmu2ubuntu8.5+esm4, plus listed versions 2.4.31-1+nmu2ubuntu32.4.31-1+nmu2ubuntu42.4.31-1+nmu2ubuntu52.4.31-1+nmu2ubuntu82.4.31-1+nmu2ubuntu8.1 Show 7 moreShow less2.4.31-1+nmu2ubuntu8.22.4.31-1+nmu2ubuntu8.32.4.31-1+nmu2ubuntu8.42.4.31-1+nmu2ubuntu8.52.4.31-1+nmu2ubuntu8.5+esm12.4.31-1+nmu2ubuntu8.5+esm22.4.31-1+nmu2ubuntu8.5+esm3 |
2.4.31-1+nmu2ubuntu8.5+esm4 |
openldapUbuntu:16.04:LTS |
before 2.4.42+dfsg-2ubuntu3.11, plus listed versions 2.4.41+dfsg-1ubuntu22.4.41+dfsg-1ubuntu32.4.42+dfsg-2ubuntu12.4.42+dfsg-2ubuntu32.4.42+dfsg-2ubuntu3.1 Show 9 moreShow less2.4.42+dfsg-2ubuntu3.22.4.42+dfsg-2ubuntu3.32.4.42+dfsg-2ubuntu3.42.4.42+dfsg-2ubuntu3.52.4.42+dfsg-2ubuntu3.62.4.42+dfsg-2ubuntu3.72.4.42+dfsg-2ubuntu3.82.4.42+dfsg-2ubuntu3.92.4.42+dfsg-2ubuntu3.10 |
2.4.42+dfsg-2ubuntu3.11 |
openldapUbuntu:18.04:LTS |
before 2.4.45+dfsg-1ubuntu1.8, plus listed versions 2.4.45+dfsg-1ubuntu12.4.45+dfsg-1ubuntu1.12.4.45+dfsg-1ubuntu1.22.4.45+dfsg-1ubuntu1.32.4.45+dfsg-1ubuntu1.42.4.45+dfsg-1ubuntu1.52.4.45+dfsg-1ubuntu1.62.4.45+dfsg-1ubuntu1.7 |
2.4.45+dfsg-1ubuntu1.8 |
openldapUbuntu:20.04:LTS |
before 2.4.49+dfsg-2ubuntu1.5, plus listed versions 2.4.48+dfsg-1ubuntu12.4.48+dfsg-1ubuntu22.4.48+dfsg-1ubuntu32.4.48+dfsg-1ubuntu42.4.49+dfsg-1ubuntu1 Show 4 moreShow less2.4.49+dfsg-2ubuntu12.4.49+dfsg-2ubuntu1.22.4.49+dfsg-2ubuntu1.32.4.49+dfsg-2ubuntu1.4 |
2.4.49+dfsg-2ubuntu1.5 |
openldapUbuntu:16.04:LTS From an advisory covering 2 CVEs |
before 2.4.42+dfsg-2ubuntu3.11, plus listed versions 2.4.41+dfsg-1ubuntu22.4.41+dfsg-1ubuntu32.4.42+dfsg-2ubuntu12.4.42+dfsg-2ubuntu32.4.42+dfsg-2ubuntu3.1 Show 9 moreShow less2.4.42+dfsg-2ubuntu3.22.4.42+dfsg-2ubuntu3.32.4.42+dfsg-2ubuntu3.42.4.42+dfsg-2ubuntu3.52.4.42+dfsg-2ubuntu3.62.4.42+dfsg-2ubuntu3.72.4.42+dfsg-2ubuntu3.82.4.42+dfsg-2ubuntu3.92.4.42+dfsg-2ubuntu3.10 |
2.4.42+dfsg-2ubuntu3.11 |
openldapUbuntu:18.04:LTS From an advisory covering 2 CVEs |
before 2.4.45+dfsg-1ubuntu1.8, plus listed versions 2.4.45+dfsg-1ubuntu12.4.45+dfsg-1ubuntu1.12.4.45+dfsg-1ubuntu1.22.4.45+dfsg-1ubuntu1.32.4.45+dfsg-1ubuntu1.42.4.45+dfsg-1ubuntu1.52.4.45+dfsg-1ubuntu1.62.4.45+dfsg-1ubuntu1.7 |
2.4.45+dfsg-1ubuntu1.8 |
openldapUbuntu:20.04:LTS From an advisory covering 2 CVEs |
before 2.4.49+dfsg-2ubuntu1.5, plus listed versions 2.4.48+dfsg-1ubuntu12.4.48+dfsg-1ubuntu22.4.48+dfsg-1ubuntu32.4.48+dfsg-1ubuntu42.4.49+dfsg-1ubuntu1 Show 4 moreShow less2.4.49+dfsg-2ubuntu12.4.49+dfsg-2ubuntu1.22.4.49+dfsg-2ubuntu1.32.4.49+dfsg-2ubuntu1.4 |
2.4.49+dfsg-2ubuntu1.5 |
openldapUbuntu:Pro:14.04:LTS From an advisory covering 2 CVEs |
before 2.4.31-1+nmu2ubuntu8.5+esm4, plus listed versions 2.4.31-1+nmu2ubuntu32.4.31-1+nmu2ubuntu42.4.31-1+nmu2ubuntu52.4.31-1+nmu2ubuntu82.4.31-1+nmu2ubuntu8.1 Show 7 moreShow less2.4.31-1+nmu2ubuntu8.22.4.31-1+nmu2ubuntu8.32.4.31-1+nmu2ubuntu8.42.4.31-1+nmu2ubuntu8.52.4.31-1+nmu2ubuntu8.5+esm12.4.31-1+nmu2ubuntu8.5+esm22.4.31-1+nmu2ubuntu8.5+esm3 |
2.4.31-1+nmu2ubuntu8.5+esm4 |
openldap2openSUSE:Leap 15.1 From an advisory covering 2 CVEs |
before 2.4.46-lp151.10.24.1 | 2.4.46-lp151.10.24.1 |
openldap2openSUSE:Leap 15.2 From an advisory covering 2 CVEs |
before 2.4.46-lp152.14.15.1 | 2.4.46-lp152.14.15.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-25710 is a high vulnerability (CVSS 7.5) in Openldap, published November 13, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.73%, the 86th percentile. Fixed in openldap 2.4.48-r2.
References
debian.org/security/2020/dsa-4792
lists.debian.org/debian-lts-announce/2020/12/msg00008.html
bugzilla.redhat.com/show_bug.cgi?id=1899678
git.openldap.org/openldap/openldap/-/commit/ab3915154e69920d480205b4bf5ccb2b391a0a1f
lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
Show 39 moreShow less
security.netapp.com/advisory/ntap-20210716-0003
cert-portal.siemens.com/productcert/html/ssa-398330.html
nvd.nist.gov/vuln/detail/CVE-2020-25710
github.com/advisories/GHSA-8wg3-gqcw-9fq9
security.alpinelinux.org/vuln/CVE-2020-25710
docs.bell-sw.com/security/cves/CVE-2020-25710
errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2025-1758636652.html
security-tracker.debian.org/tracker/CVE-2020-25710
advisories.mageia.org/MGASA-2021-0046.html
bugs.mageia.org/show_bug.cgi?id=27625
ubuntu.com/security/notices/USN-4634-1
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1244
access.redhat.com/errata/RHSA-2022:0621
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0621.json
cve.org/CVERecord?id=CVE-2020-25709
suse.com/support/update/announcement/2021/suse-su-20210128-1
bugzilla.suse.com/1178909
lists.opensuse.org/archives/list/[email protected]/thread/HXI5DVBGML6XRCQGGMOYKQFUJDZ2JPS6