CVE-2020-25709
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be...
7.5 HighFix available
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
3.44%Up 2.2 points since May 19, 2021
What each source reports
NVD Score used
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.
- Record
CVE-2020-25709- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-617
- Updated
- 2026-11-02
CVE List No score
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.
- Record
CVE-2020-25709- Updated
- 2026-11-02
EUVDEUVD-2020-18364 No score
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.
- Record
EUVD-2020-18364- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-cpm7-pgmm-3mfr
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be...
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.
- Record
GHSA-cpm7-pgmm-3mfr- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-617
- Updated
- 2026-11-02
OSVALPINE-CVE-2020-25709
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.
- Record
ALPINE-CVE-2020-25709- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVBELL-CVE-2020-25709
CVE-2020-25709 does not affect BellSoft software
- Record
BELL-CVE-2020-25709- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 19 moreShow less
OSV
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.
- Record
CVE-2020-25709- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2020-25709
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.
- Record
DEBIAN-CVE-2020-25709- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVJLSEC-2026-161
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.
- Record
JLSEC-2026-161- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
OSVRHSA-2022:0621
Red Hat Security Advisory: openldap security update
- Record
RHSA-2022:0621- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-25709
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.
- Record
UBUNTU-CVE-2020-25709- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVBIT-openldap-2020-25709 No score
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.
- Record
BIT-openldap-2020-25709- Updated
- 2026-11-02
OSVCLSA-2025-1758636652 No score
openldap: Fix of 14 CVEs
- Rebase to 2.4.58 to fix the following vulnerabilities:
- CVE-2020-12243: fix denial of service caused by LDAP search filters with nested boolean expressions
- CVE-2020-36221: fix integer underflow in the Certificate Exact Assertion processing
- CVE-2020-36223: fix slapd crash in the Values Return Filter control handling
- CVE-2020-36226: fix slapd crash in the saslAuthzTo processing
- CVE-2020-36228: fix slapd crash in the Certificate List Exact Assertion processing
- CVE-2020-36225: fix double free and slapd crash in the saslAuthzTo processing
- CVE-2020-36227: fix infinite loop in slapd with the cancel_extop Cancel operation
- CVE-2020-36230: fix assertion failure in slapd in the X.509 DN parsing in decode.c
- CVE-2020-25692: fix NULL pointer dereference during a request for renaming RDNs
- CVE-2020-25709: fix assertion failure caused by processing malicious packet
- CVE-2020-36224: fix invalid pointer free and slapd crash in the saslAuthzTo processing
- CVE-2020-36229: fix slapd crash in the X.509 DN parsing in ad_keystring
- CVE-2020-25710: fix failed assertion in csnNormalize23()
- CVE-2020-36222: fix assertion failure in slapd in the saslAuthzTo validation
- Record
CLSA-2025-1758636652- Updated
- 2026-11-02
OSVCLSA-2025-1758645818 No score
openldap: Fix of 14 CVEs
- Rebase to 2.4.58 to fix the following vulnerabilities:
- CVE-2020-12243: fix denial of service caused by LDAP search filters with nested boolean expressions
- CVE-2020-36221: fix integer underflow in the Certificate Exact Assertion processing
- CVE-2020-36223: fix slapd crash in the Values Return Filter control handling
- CVE-2020-36226: fix slapd crash in the saslAuthzTo processing
- CVE-2020-36228: fix slapd crash in the Certificate List Exact Assertion processing
- CVE-2020-36225: fix double free and slapd crash in the saslAuthzTo processing
- CVE-2020-36227: fix infinite loop in slapd with the cancel_extop Cancel operation
- CVE-2020-36230: fix assertion failure in slapd in the X.509 DN parsing in decode.c
- CVE-2020-25692: fix NULL pointer dereference during a request for renaming RDNs
- CVE-2020-25709: fix assertion failure caused by processing malicious packet
- CVE-2020-36224: fix invalid pointer free and slapd crash in the saslAuthzTo processing
- CVE-2020-36229: fix slapd crash in the X.509 DN parsing in ad_keystring
- CVE-2020-25710: fix failed assertion in csnNormalize23()
- CVE-2020-36222: fix assertion failure in slapd in the saslAuthzTo validation
- Record
CLSA-2025-1758645818- Updated
- 2026-11-02
OSVCLSA-2026-1777310722 No score
openldap: Fix of 15 CVEs
- CVE-2019-13565: SASL session encryption SSF not reset on new connection, allowing downgrade
- CVE-2020-12243: slapd crash via deeply nested LDAP search filter boolean expressions
- CVE-2020-25692: NULL pointer dereference in slapd during modRDN request
- CVE-2020-25709: slapd assertion failure via crafted certificate list validation
- CVE-2020-25710: slapd assertion failure in obsolete csnNormalize23
- CVE-2020-36221: slapd integer underflow crash in Certificate Exact Assertion processing
- CVE-2020-36222: slapd assertion failure in saslAuthzTo validation
- CVE-2020-36223: slapd double free crash in Values Return Filter control handling
- CVE-2020-36224: slapd invalid pointer free and crash in saslAuthzTo processing
- CVE-2020-36225: slapd double free crash in saslAuthzTo processing
- CVE-2020-36226: slapd memch->bv_len miscalculation and crash in saslAuthzTo processing
- CVE-2020-36227: slapd infinite loop via cancel_extop Cancel operation
- CVE-2020-36228: slapd integer underflow crash in Certificate List Exact Assertion processing
- CVE-2020-36229: slapd crash in X.509 DN parsing ad_keystring via ldap_X509dn2bv
- CVE-2020-36230: slapd assertion failure in X.509 DN parsing ber_next_element in decode.c
- Record
CLSA-2026-1777310722- Updated
- 2026-11-02
OSVCLSA-2026-1777393215 No score
openldap: Fix of 15 CVEs
- CVE-2019-13565: SASL session encryption SSF not reset on new connection, allowing downgrade
- CVE-2020-12243: slapd crash via deeply nested LDAP search filter boolean expressions
- CVE-2020-25692: NULL pointer dereference in slapd during modRDN request
- CVE-2020-25709: slapd assertion failure via crafted certificate list validation
- CVE-2020-25710: slapd assertion failure in obsolete csnNormalize23
- CVE-2020-36221: slapd integer underflow crash in Certificate Exact Assertion processing
- CVE-2020-36222: slapd assertion failure in saslAuthzTo validation
- CVE-2020-36223: slapd double free crash in Values Return Filter control handling
- CVE-2020-36224: slapd invalid pointer free and crash in saslAuthzTo processing
- CVE-2020-36225: slapd double free crash in saslAuthzTo processing
- CVE-2020-36226: slapd memch->bv_len miscalculation and crash in saslAuthzTo processing
- CVE-2020-36227: slapd infinite loop via cancel_extop Cancel operation
- CVE-2020-36228: slapd integer underflow crash in Certificate List Exact Assertion processing
- CVE-2020-36229: slapd crash in X.509 DN parsing ad_keystring via ldap_X509dn2bv
- CVE-2020-36230: slapd assertion failure in X.509 DN parsing ber_next_element in decode.c
- Record
CLSA-2026-1777393215- Updated
- 2026-11-02
OSVMGASA-2021-0046 No score
Updated openldap packages fix security vulnerabilities
It was discovered that OpenLDAP incorrectly handled certain malformed inputs. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service (CVE-2020-25709, CVE-2020-25710).
- Record
MGASA-2021-0046- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:0102-1 No score
Security update for openldap2
This update for openldap2 fixes the following issues:
Security issues fixed:
- CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909).
- CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909).
Non-security issue fixed:
- Retry binds in the LDAP backend when the remote LDAP server disconnected the (idle) LDAP connection. (bsc#1179503)
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2021:0102-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:0107-1 No score
Security update for openldap2
This update for openldap2 fixes the following issues:
Security issues fixed:
- CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909).
- CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909).
Non-security issue fixed:
- Retry binds in the LDAP backend when the remote LDAP server disconnected the (idle) LDAP connection. (bsc#1179503)
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2021:0107-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:0128-1 No score
Security update for openldap2
This update for openldap2 fixes the following issues:
- CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909).
- CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909).
- Record
SUSE-SU-2021:0128-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:0129-1 No score
Security update for openldap2
This update for openldap2 fixes the following issues:
Security issues fixed:
- CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909).
- CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909).
Non-security issue fixed:
- Retry binds in the LDAP backend when the remote LDAP server disconnected the (idle) LDAP connection. (bsc#1179503)
- Record
SUSE-SU-2021:0129-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:0142-1 No score
Security update for openldap2
This update for openldap2 fixes the following issues:
- CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909).
- CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909).
- Record
SUSE-SU-2021:0142-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:14597-1 No score
Security update for openldap2
This update for openldap2 fixes the following issues:
- CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909).
- CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909).
- Record
SUSE-SU-2021:14597-1- Updated
- 2026-11-02
OSVUSN-4634-1 No score
openldap vulnerabilities
It was discovered that OpenLDAP incorrectly handled certain malformed inputs. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service.
- Record
USN-4634-1- Updated
- 2026-11-02
OSVUSN-4634-2 No score
openldap vulnerabilities
USN-4634-1 fixed several vulnerabilities in OpenLDAP. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.
Original advisory details:
It was discovered that OpenLDAP incorrectly handled certain malformed inputs. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service.
- Record
USN-4634-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openldapAlpine:v3.10 |
before 2.4.48-r2 | 2.4.48-r2 |
openldapAlpine:v3.11 |
before 2.4.48-r3 | 2.4.48-r3 |
openldapAlpine:v3.12 |
before 2.4.50-r1 | 2.4.50-r1 |
openldapAlpine:v3.13 |
before 2.4.56-r0 | 2.4.56-r0 |
openldapAlpine:v3.14 |
before 2.4.56-r0 | 2.4.56-r0 |
openldapAlpine:v3.15 |
before 2.4.56-r0 | 2.4.56-r0 |
openldapAlpine:v3.16 |
before 2.4.56-r0 | 2.4.56-r0 |
openldapAlpine:v3.17 |
before 2.4.56-r0 | 2.4.56-r0 |
openldapAlpine:v3.18 |
before 2.4.56-r0 | 2.4.56-r0 |
openldapAlpine:v3.19 |
before 2.4.56-r0 | 2.4.56-r0 |
Show 76 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openldapAlpine:v3.20 |
before 2.4.56-r0 | 2.4.56-r0 |
openldapAlpine:v3.21 |
before 2.4.56-r0 | 2.4.56-r0 |
openldapAlpine:v3.22 |
before 2.4.56-r0 | 2.4.56-r0 |
openldapAlpine:v3.23 |
before 2.4.56-r0 | 2.4.56-r0 |
openldapAlpine:v3.24 |
before 2.4.56-r0 | 2.4.56-r0 |
openldapAlpine:v3.9 |
before 2.4.48-r2 | 2.4.48-r2 |
openldapBitnami |
before 2.4.56 | 2.4.56 |
openldapTuxCare:OracleLinux:6 From an advisory covering 14 CVEs |
before 2.4.58-1.el6.tuxcare.els1 | 2.4.58-1.el6.tuxcare.els1 |
openldap-clientsTuxCare:OracleLinux:6 From an advisory covering 14 CVEs |
before 2.4.58-1.el6.tuxcare.els1 | 2.4.58-1.el6.tuxcare.els1 |
openldap-develTuxCare:OracleLinux:6 From an advisory covering 14 CVEs |
before 2.4.58-1.el6.tuxcare.els1 | 2.4.58-1.el6.tuxcare.els1 |
openldap-serversTuxCare:OracleLinux:6 From an advisory covering 14 CVEs |
before 2.4.58-1.el6.tuxcare.els1 | 2.4.58-1.el6.tuxcare.els1 |
openldap-servers-sqlTuxCare:OracleLinux:6 From an advisory covering 14 CVEs |
before 2.4.58-1.el6.tuxcare.els1 | 2.4.58-1.el6.tuxcare.els1 |
openldapTuxCare:CentOS:6 From an advisory covering 14 CVEs |
before 2.4.58-1.el6.tuxcare.els1 | 2.4.58-1.el6.tuxcare.els1 |
openldap-clientsTuxCare:CentOS:6 From an advisory covering 14 CVEs |
before 2.4.58-1.el6.tuxcare.els1 | 2.4.58-1.el6.tuxcare.els1 |
openldap-develTuxCare:CentOS:6 From an advisory covering 14 CVEs |
before 2.4.58-1.el6.tuxcare.els1 | 2.4.58-1.el6.tuxcare.els1 |
openldap-serversTuxCare:CentOS:6 From an advisory covering 14 CVEs |
before 2.4.58-1.el6.tuxcare.els1 | 2.4.58-1.el6.tuxcare.els1 |
openldap-servers-sqlTuxCare:CentOS:6 From an advisory covering 14 CVEs |
before 2.4.58-1.el6.tuxcare.els1 | 2.4.58-1.el6.tuxcare.els1 |
openldapTuxCare:CentOS:8.5 From an advisory covering 15 CVEs |
before 2.4.46-18.el8.tuxcare.els4 | 2.4.46-18.el8.tuxcare.els4 |
openldap-clientsTuxCare:CentOS:8.5 From an advisory covering 15 CVEs |
before 2.4.46-18.el8.tuxcare.els4 | 2.4.46-18.el8.tuxcare.els4 |
openldap-develTuxCare:CentOS:8.5 From an advisory covering 15 CVEs |
before 2.4.46-18.el8.tuxcare.els4 | 2.4.46-18.el8.tuxcare.els4 |
openldap-serversTuxCare:CentOS:8.5 From an advisory covering 15 CVEs |
before 2.4.46-18.el8.tuxcare.els4 | 2.4.46-18.el8.tuxcare.els4 |
openldapTuxCare:CentOS:8.4 From an advisory covering 15 CVEs |
before 2.4.46-17.el8_4.tuxcare.els4 | 2.4.46-17.el8_4.tuxcare.els4 |
openldap-clientsTuxCare:CentOS:8.4 From an advisory covering 15 CVEs |
before 2.4.46-17.el8_4.tuxcare.els4 | 2.4.46-17.el8_4.tuxcare.els4 |
openldap-develTuxCare:CentOS:8.4 From an advisory covering 15 CVEs |
before 2.4.46-17.el8_4.tuxcare.els4 | 2.4.46-17.el8_4.tuxcare.els4 |
openldap-serversTuxCare:CentOS:8.4 From an advisory covering 15 CVEs |
before 2.4.46-17.el8_4.tuxcare.els4 | 2.4.46-17.el8_4.tuxcare.els4 |
openldapDebian:12 |
before 2.4.56+dfsg-1 | 2.4.56+dfsg-1 |
openldapDebian:13 |
before 2.4.56+dfsg-1 | 2.4.56+dfsg-1 |
openldapDebian:14 |
before 2.4.56+dfsg-1 | 2.4.56+dfsg-1 |
openldapDebian:9 From an advisory covering 2 CVEs |
before 2.4.44+dfsg-5+deb9u6, plus listed versions 2.4.44+dfsg-52.4.44+dfsg-5+deb9u12.4.44+dfsg-5+deb9u1~bpo8+12.4.44+dfsg-5+deb9u22.4.44+dfsg-5+deb9u32.4.44+dfsg-5+deb9u42.4.44+dfsg-5+deb9u5 |
2.4.44+dfsg-5+deb9u6 |
openldapDebian:10 From an advisory covering 2 CVEs |
before 2.4.47+dfsg-3+deb10u4, plus listed versions 2.4.47+dfsg-32.4.47+dfsg-3+deb10u12.4.47+dfsg-3+deb10u1~bpo9+12.4.47+dfsg-3+deb10u22.4.47+dfsg-3+deb10u2~bpo9+12.4.47+dfsg-3+deb10u3 |
2.4.47+dfsg-3+deb10u4 |
OpenLDAPClient_jllJulia |
before 2.5.14+0 | 2.5.14+0 |
openldapMageia:7 From an advisory covering 2 CVEs |
before 2.4.50-1.3.mga7 | 2.4.50-1.3.mga7 |
openldapRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-clientsRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-develRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-serversRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-servers-sqlRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-develRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-serversRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-servers-sqlRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldapRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-clientsRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-develRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-serversRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-servers-sqlRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldapRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-clientsRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-develRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-serversRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap-servers-sqlRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:2.4.44-25.el7_9 | 0:2.4.44-25.el7_9 |
openldap2SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 2 CVEs |
before 2.4.41-18.80.1 | 2.4.41-18.80.1 |
openldap2SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 2 CVEs |
before 2.4.41-18.80.1 | 2.4.41-18.80.1 |
openldap2SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 2 CVEs |
before 2.4.41-18.80.1 | 2.4.41-18.80.1 |
openldap2SUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 2 CVEs |
before 2.4.46-9.45.1 | 2.4.46-9.45.1 |
openldap2SUSE:Linux Enterprise Module for Development Tools 15 SP2 From an advisory covering 2 CVEs |
before 2.4.46-9.45.1 | 2.4.46-9.45.1 |
openldap2SUSE:Linux Enterprise Module for Legacy 15 SP2 From an advisory covering 2 CVEs |
before 2.4.46-9.45.1 | 2.4.46-9.45.1 |
openldap2SUSE:Linux Enterprise Module for Legacy 12 From an advisory covering 2 CVEs |
before 2.4.41-18.24.26.1 | 2.4.41-18.24.26.1 |
openldap2SUSE:Linux Enterprise Server for SAP Applications 12 SP2 From an advisory covering 2 CVEs |
before 2.4.41-18.24.26.1 | 2.4.41-18.24.26.1 |
openldap2SUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 2 CVEs |
before 2.4.41-18.24.26.1 | 2.4.41-18.24.26.1 |
openldap2SUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 2 CVEs |
before 2.4.41-18.24.26.1 | 2.4.41-18.24.26.1 |
openldap2SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 2 CVEs |
before 2.4.41-18.24.26.1 | 2.4.41-18.24.26.1 |
openldap2-client-openssl1SUSE:Linux Enterprise Server 11-SECURITY From an advisory covering 2 CVEs |
before 2.4.26-0.74.19.1 | 2.4.26-0.74.19.1 |
openldapUbuntu:Pro:14.04:LTS |
before 2.4.31-1+nmu2ubuntu8.5+esm4, plus listed versions 2.4.31-1+nmu2ubuntu32.4.31-1+nmu2ubuntu42.4.31-1+nmu2ubuntu52.4.31-1+nmu2ubuntu82.4.31-1+nmu2ubuntu8.1 Show 7 moreShow less2.4.31-1+nmu2ubuntu8.22.4.31-1+nmu2ubuntu8.32.4.31-1+nmu2ubuntu8.42.4.31-1+nmu2ubuntu8.52.4.31-1+nmu2ubuntu8.5+esm12.4.31-1+nmu2ubuntu8.5+esm22.4.31-1+nmu2ubuntu8.5+esm3 |
2.4.31-1+nmu2ubuntu8.5+esm4 |
openldapUbuntu:16.04:LTS |
before 2.4.42+dfsg-2ubuntu3.11, plus listed versions 2.4.41+dfsg-1ubuntu22.4.41+dfsg-1ubuntu32.4.42+dfsg-2ubuntu12.4.42+dfsg-2ubuntu32.4.42+dfsg-2ubuntu3.1 Show 9 moreShow less2.4.42+dfsg-2ubuntu3.22.4.42+dfsg-2ubuntu3.32.4.42+dfsg-2ubuntu3.42.4.42+dfsg-2ubuntu3.52.4.42+dfsg-2ubuntu3.62.4.42+dfsg-2ubuntu3.72.4.42+dfsg-2ubuntu3.82.4.42+dfsg-2ubuntu3.92.4.42+dfsg-2ubuntu3.10 |
2.4.42+dfsg-2ubuntu3.11 |
openldapUbuntu:18.04:LTS |
before 2.4.45+dfsg-1ubuntu1.8, plus listed versions 2.4.45+dfsg-1ubuntu12.4.45+dfsg-1ubuntu1.12.4.45+dfsg-1ubuntu1.22.4.45+dfsg-1ubuntu1.32.4.45+dfsg-1ubuntu1.42.4.45+dfsg-1ubuntu1.52.4.45+dfsg-1ubuntu1.62.4.45+dfsg-1ubuntu1.7 |
2.4.45+dfsg-1ubuntu1.8 |
openldapUbuntu:20.04:LTS |
before 2.4.49+dfsg-2ubuntu1.5, plus listed versions 2.4.48+dfsg-1ubuntu12.4.48+dfsg-1ubuntu22.4.48+dfsg-1ubuntu32.4.48+dfsg-1ubuntu42.4.49+dfsg-1ubuntu1 Show 4 moreShow less2.4.49+dfsg-2ubuntu12.4.49+dfsg-2ubuntu1.22.4.49+dfsg-2ubuntu1.32.4.49+dfsg-2ubuntu1.4 |
2.4.49+dfsg-2ubuntu1.5 |
openldapUbuntu:16.04:LTS From an advisory covering 2 CVEs |
before 2.4.42+dfsg-2ubuntu3.11, plus listed versions 2.4.41+dfsg-1ubuntu22.4.41+dfsg-1ubuntu32.4.42+dfsg-2ubuntu12.4.42+dfsg-2ubuntu32.4.42+dfsg-2ubuntu3.1 Show 9 moreShow less2.4.42+dfsg-2ubuntu3.22.4.42+dfsg-2ubuntu3.32.4.42+dfsg-2ubuntu3.42.4.42+dfsg-2ubuntu3.52.4.42+dfsg-2ubuntu3.62.4.42+dfsg-2ubuntu3.72.4.42+dfsg-2ubuntu3.82.4.42+dfsg-2ubuntu3.92.4.42+dfsg-2ubuntu3.10 |
2.4.42+dfsg-2ubuntu3.11 |
openldapUbuntu:18.04:LTS From an advisory covering 2 CVEs |
before 2.4.45+dfsg-1ubuntu1.8, plus listed versions 2.4.45+dfsg-1ubuntu12.4.45+dfsg-1ubuntu1.12.4.45+dfsg-1ubuntu1.22.4.45+dfsg-1ubuntu1.32.4.45+dfsg-1ubuntu1.42.4.45+dfsg-1ubuntu1.52.4.45+dfsg-1ubuntu1.62.4.45+dfsg-1ubuntu1.7 |
2.4.45+dfsg-1ubuntu1.8 |
openldapUbuntu:20.04:LTS From an advisory covering 2 CVEs |
before 2.4.49+dfsg-2ubuntu1.5, plus listed versions 2.4.48+dfsg-1ubuntu12.4.48+dfsg-1ubuntu22.4.48+dfsg-1ubuntu32.4.48+dfsg-1ubuntu42.4.49+dfsg-1ubuntu1 Show 4 moreShow less2.4.49+dfsg-2ubuntu12.4.49+dfsg-2ubuntu1.22.4.49+dfsg-2ubuntu1.32.4.49+dfsg-2ubuntu1.4 |
2.4.49+dfsg-2ubuntu1.5 |
openldapUbuntu:Pro:14.04:LTS From an advisory covering 2 CVEs |
before 2.4.31-1+nmu2ubuntu8.5+esm4, plus listed versions 2.4.31-1+nmu2ubuntu32.4.31-1+nmu2ubuntu42.4.31-1+nmu2ubuntu52.4.31-1+nmu2ubuntu82.4.31-1+nmu2ubuntu8.1 Show 7 moreShow less2.4.31-1+nmu2ubuntu8.22.4.31-1+nmu2ubuntu8.32.4.31-1+nmu2ubuntu8.42.4.31-1+nmu2ubuntu8.52.4.31-1+nmu2ubuntu8.5+esm12.4.31-1+nmu2ubuntu8.5+esm22.4.31-1+nmu2ubuntu8.5+esm3 |
2.4.31-1+nmu2ubuntu8.5+esm4 |
openldap2openSUSE:Leap 15.1 From an advisory covering 2 CVEs |
before 2.4.46-lp151.10.24.1 | 2.4.46-lp151.10.24.1 |
openldap2openSUSE:Leap 15.2 From an advisory covering 2 CVEs |
before 2.4.46-lp152.14.15.1 | 2.4.46-lp152.14.15.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-25709 is a high vulnerability (CVSS 7.5) in Openldap, published November 13, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.44%, the 89th percentile. Fixed in openldap 2.4.48-r2.
References
debian.org/security/2020/dsa-4792
lists.debian.org/debian-lts-announce/2020/12/msg00008.html
support.apple.com/kb/HT212147
seclists.org/fulldisclosure/2021/Feb/14
bugzilla.redhat.com/show_bug.cgi?id=1899675
lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
Show 40 moreShow less
security.netapp.com/advisory/ntap-20210716-0003
cert-portal.siemens.com/productcert/html/ssa-398330.html
nvd.nist.gov/vuln/detail/CVE-2020-25709
github.com/advisories/GHSA-cpm7-pgmm-3mfr
security.alpinelinux.org/vuln/CVE-2020-25709
docs.bell-sw.com/security/cves/CVE-2020-25709
errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2025-1758636652.html
security-tracker.debian.org/tracker/CVE-2020-25709
advisories.mageia.org/MGASA-2021-0046.html
bugs.mageia.org/show_bug.cgi?id=27625
ubuntu.com/security/notices/USN-4634-1
access.redhat.com/errata/RHSA-2022:0621
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0621.json
cve.org/CVERecord?id=CVE-2020-25709
git.openldap.org/openldap/openldap/-/commit/ab3915154e69920d480205b4bf5ccb2b391a0a1f
suse.com/support/update/announcement/2021/suse-su-20210128-1
bugzilla.suse.com/1178909
lists.opensuse.org/archives/list/[email protected]/thread/HXI5DVBGML6XRCQGGMOYKQFUJDZ2JPS6