{"id":"CVE-2020-12243","aliases":["ALPINE-CVE-2020-12243","BELL-CVE-2020-12243","BIT-openldap-2020-12243","CLSA-2025-1758636652","CLSA-2025-1758645818","CLSA-2026-1777310722","CLSA-2026-1777393215","DEBIAN-CVE-2020-12243","DLA-2199-1","DSA-4666-1","EUVD-2020-4558","GHSA-v3qx-x9jr-g987","MGASA-2020-0200","RHSA-2020:4041","SUSE-SU-2020:1193-1","SUSE-SU-2020:1210-1","SUSE-SU-2020:1219-1","SUSE-SU-2020:14358-1","UBUNTU-CVE-2020-12243","USN-4352-1","USN-4352-2","openSUSE-SU-2020:0647-1"],"status":"published","title":"In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean...","description":"In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.04718,"percentile":0.91898,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400","CWE-674"],"published":"2020-04-28T00:00:00Z","modified":"2026-11-02T02:46:05Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"openldap","fixed_in":["2.4.48-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"openldap","fixed_in":["2.4.48-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"openldap","fixed_in":["2.4.50-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"openldap","fixed_in":["2.4.50-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"openldap","fixed_in":["2.4.50-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"openldap","fixed_in":["2.4.50-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openldap","fixed_in":["2.4.50-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openldap","fixed_in":["2.4.50-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openldap","fixed_in":["2.4.50-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openldap","fixed_in":["2.4.50-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openldap","fixed_in":["2.4.50-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openldap","fixed_in":["2.4.50-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openldap","fixed_in":["2.4.50-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openldap","fixed_in":["2.4.50-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openldap","fixed_in":["2.4.50-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"openldap","fixed_in":["2.4.48-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"openldap","fixed_in":["2.4.48-r1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"openldap","fixed_in":["2.4.50"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"openldap","fixed_in":["2.4.50+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openldap","fixed_in":["2.4.50+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openldap","fixed_in":["2.4.50+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"openldap","fixed_in":["2.4.40+dfsg-1+deb8u6"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"openldap","fixed_in":["2.4.44+dfsg-5+deb9u4"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"openldap","fixed_in":["2.4.47+dfsg-3+deb10u2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap","fixed_in":["0:2.4.44-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap-clients","fixed_in":["0:2.4.44-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap-debuginfo","fixed_in":["0:2.4.44-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap-devel","fixed_in":["0:2.4.44-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap-servers","fixed_in":["0:2.4.44-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap-servers-sql","fixed_in":["0:2.4.44-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openldap","fixed_in":["0:2.4.44-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openldap-clients","fixed_in":["0:2.4.44-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openldap-debuginfo","fixed_in":["0:2.4.44-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openldap-devel","fixed_in":["0:2.4.44-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openldap-servers","fixed_in":["0:2.4.44-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openldap-servers-sql","fixed_in":["0:2.4.44-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap","fixed_in":["0:2.4.44-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap-clients","fixed_in":["0:2.4.44-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap-debuginfo","fixed_in":["0:2.4.44-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap-devel","fixed_in":["0:2.4.44-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap-servers","fixed_in":["0:2.4.44-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap-servers-sql","fixed_in":["0:2.4.44-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap","fixed_in":["0:2.4.44-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap-clients","fixed_in":["0:2.4.44-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap-debuginfo","fixed_in":["0:2.4.44-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap-devel","fixed_in":["0:2.4.44-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap-servers","fixed_in":["0:2.4.44-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap-servers-sql","fixed_in":["0:2.4.44-22.el7"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openldap2","fixed_in":["2.4.41-18.68.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"openldap2","fixed_in":["2.4.41-18.68.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"openldap2","fixed_in":["2.4.41-18.68.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openldap2","fixed_in":["2.4.41-18.68.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"openldap2","fixed_in":["2.4.41-18.68.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"openldap2","fixed_in":["2.4.41-18.68.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"openldap2","fixed_in":["2.4.41-18.68.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"openldap2","fixed_in":["2.4.41-18.68.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"openldap2","fixed_in":["2.4.41-18.68.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"openldap2","fixed_in":["2.4.41-18.68.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"openldap2","fixed_in":["2.4.41-18.68.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"openldap2","fixed_in":["2.4.41-18.68.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"openldap2","fixed_in":["2.4.41-18.68.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openldap2","fixed_in":["2.4.41-18.68.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openldap2","fixed_in":["2.4.41-18.68.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openldap2","fixed_in":["2.4.41-18.68.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 5","package":"openldap2","fixed_in":["2.4.41-18.68.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"openldap2","fixed_in":["2.4.46-9.28.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"openldap2","fixed_in":["2.4.46-9.28.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP1","package":"openldap2","fixed_in":["2.4.46-9.28.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"openldap2","fixed_in":["2.4.46-9.28.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"openldap2","fixed_in":["2.4.46-9.28.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"openldap2","fixed_in":["2.4.46-9.28.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"openldap2","fixed_in":["2.4.46-9.28.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11-SECURITY","package":"openldap2-client-openssl1","fixed_in":["2.4.26-0.74.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"openldap2","fixed_in":["2.4.26-0.74.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"openldap2-client","fixed_in":["2.4.26-0.74.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"openldap2","fixed_in":["2.4.26-0.74.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"openldap2-client","fixed_in":["2.4.26-0.74.9.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openldap","fixed_in":["2.4.31-1+nmu2ubuntu8.5+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"openldap","fixed_in":["2.4.42+dfsg-2ubuntu3.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"openldap","fixed_in":["2.4.45+dfsg-1ubuntu1.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"openldap","fixed_in":["2.4.49+dfsg-2ubuntu1.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"openldap2","fixed_in":["2.4.46-lp151.10.9.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.48-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.48-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.48-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.48-r1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"openldap","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.4.50"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-18.el8.tuxcare.els4"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-18.el8.tuxcare.els4"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-18.el8.tuxcare.els4"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-18.el8.tuxcare.els4"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-17.el8_4.tuxcare.els4"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-17.el8_4.tuxcare.els4"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-17.el8_4.tuxcare.els4"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-17.el8_4.tuxcare.els4"}]}],"bundled":15},{"source":"osv","ecosystem":"Debian:12","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.40+dfsg-1+deb8u6"}]}],"versions":["2.4.40+dfsg-1","2.4.40+dfsg-1+deb8u1","2.4.40+dfsg-1+deb8u2","2.4.40+dfsg-1+deb8u3","2.4.40+dfsg-1+deb8u4","2.4.40+dfsg-1+deb8u5"]},{"source":"osv","ecosystem":"Debian:9","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44+dfsg-5+deb9u4"}]}],"versions":["2.4.44+dfsg-5","2.4.44+dfsg-5+deb9u1","2.4.44+dfsg-5+deb9u1~bpo8+1","2.4.44+dfsg-5+deb9u2","2.4.44+dfsg-5+deb9u3"]},{"source":"osv","ecosystem":"Debian:10","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.47+dfsg-3+deb10u2"}]}],"versions":["2.4.47+dfsg-3","2.4.47+dfsg-3+deb10u1","2.4.47+dfsg-3+deb10u1~bpo9+1","2.4.47+dfsg-3+deb10u2~bpo9+1"]},{"source":"osv","ecosystem":"Mageia:7","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-1.1.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-22.el7"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.68.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.68.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.68.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.68.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.68.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.68.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.68.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.68.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.68.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.68.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.68.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.68.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.68.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.68.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.68.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.68.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.68.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 12","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.24.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.24.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"openldap2-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.24.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.24.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.24.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.24.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.24.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.24.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"openldap2-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.24.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.28.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.28.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP1","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.28.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.28.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.28.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.28.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.28.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11-SECURITY","package":"openldap2-client-openssl1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-0.74.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-0.74.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"openldap2-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-0.74.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-0.74.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"openldap2-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-0.74.9.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.31-1+nmu2ubuntu8.5+esm2"}]}],"versions":["2.4.31-1+nmu2ubuntu3","2.4.31-1+nmu2ubuntu4","2.4.31-1+nmu2ubuntu5","2.4.31-1+nmu2ubuntu8","2.4.31-1+nmu2ubuntu8.1","2.4.31-1+nmu2ubuntu8.2","2.4.31-1+nmu2ubuntu8.3","2.4.31-1+nmu2ubuntu8.4","2.4.31-1+nmu2ubuntu8.5","2.4.31-1+nmu2ubuntu8.5+esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.42+dfsg-2ubuntu3.8"}]}],"versions":["2.4.41+dfsg-1ubuntu2","2.4.41+dfsg-1ubuntu3","2.4.42+dfsg-2ubuntu1","2.4.42+dfsg-2ubuntu3","2.4.42+dfsg-2ubuntu3.1","2.4.42+dfsg-2ubuntu3.2","2.4.42+dfsg-2ubuntu3.3","2.4.42+dfsg-2ubuntu3.4","2.4.42+dfsg-2ubuntu3.5","2.4.42+dfsg-2ubuntu3.6","2.4.42+dfsg-2ubuntu3.7"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.45+dfsg-1ubuntu1.5"}]}],"versions":["2.4.45+dfsg-1ubuntu1","2.4.45+dfsg-1ubuntu1.1","2.4.45+dfsg-1ubuntu1.2","2.4.45+dfsg-1ubuntu1.3","2.4.45+dfsg-1ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49+dfsg-2ubuntu1.2"}]}],"versions":["2.4.48+dfsg-1ubuntu1","2.4.48+dfsg-1ubuntu2","2.4.48+dfsg-1ubuntu3","2.4.48+dfsg-1ubuntu4","2.4.49+dfsg-1ubuntu1","2.4.49+dfsg-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.42+dfsg-2ubuntu3.8"}]}],"versions":["2.4.41+dfsg-1ubuntu2","2.4.41+dfsg-1ubuntu3","2.4.42+dfsg-2ubuntu1","2.4.42+dfsg-2ubuntu3","2.4.42+dfsg-2ubuntu3.1","2.4.42+dfsg-2ubuntu3.2","2.4.42+dfsg-2ubuntu3.3","2.4.42+dfsg-2ubuntu3.4","2.4.42+dfsg-2ubuntu3.5","2.4.42+dfsg-2ubuntu3.6","2.4.42+dfsg-2ubuntu3.7"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.45+dfsg-1ubuntu1.5"}]}],"versions":["2.4.45+dfsg-1ubuntu1","2.4.45+dfsg-1ubuntu1.1","2.4.45+dfsg-1ubuntu1.2","2.4.45+dfsg-1ubuntu1.3","2.4.45+dfsg-1ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49+dfsg-2ubuntu1.2"}]}],"versions":["2.4.48+dfsg-1ubuntu1","2.4.48+dfsg-1ubuntu2","2.4.48+dfsg-1ubuntu3","2.4.48+dfsg-1ubuntu4","2.4.49+dfsg-1ubuntu1","2.4.49+dfsg-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.31-1+nmu2ubuntu8.5+esm2"}]}],"versions":["2.4.31-1+nmu2ubuntu3","2.4.31-1+nmu2ubuntu4","2.4.31-1+nmu2ubuntu5","2.4.31-1+nmu2ubuntu8","2.4.31-1+nmu2ubuntu8.1","2.4.31-1+nmu2ubuntu8.2","2.4.31-1+nmu2ubuntu8.3","2.4.31-1+nmu2ubuntu8.4","2.4.31-1+nmu2ubuntu8.5","2.4.31-1+nmu2ubuntu8.5+esm1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-lp151.10.9.1"}]}]}],"products":[{"vendor":"apple","product":"mac_os_x"},{"vendor":"broadcom","product":"brocade_fabric_operating_system"},{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"netapp","product":"cloud_backup"},{"vendor":"netapp","product":"h300e_firmware"},{"vendor":"netapp","product":"h300s_firmware"},{"vendor":"netapp","product":"h410c_firmware"},{"vendor":"netapp","product":"h410s_firmware"},{"vendor":"netapp","product":"h500e_firmware"},{"vendor":"netapp","product":"h500s_firmware"},{"vendor":"netapp","product":"h700e_firmware"},{"vendor":"netapp","product":"h700s_firmware"},{"vendor":"netapp","product":"steelstore_cloud_integrated_storage"},{"vendor":"openldap","product":"openldap"},{"vendor":"opensuse","product":"leap"},{"vendor":"oracle","product":"solaris"},{"vendor":"oracle","product":"zfs_storage_appliance_kit"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://www.debian.org/security/2020/dsa-4666","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00001.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4352-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00016.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4352-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"https://bugs.openldap.org/show_bug.cgi?id=9202","tags":["x_refsource_MISC","x_transferred","Exploit","Patch","Vendor Advisory","advisory","fix"]},{"url":"https://git.openldap.org/openldap/openldap/-/blob/OPENLDAP_REL_ENG_2_4/CHANGES","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"https://git.openldap.org/openldap/openldap/-/commit/98464c11df8247d6a11b52e294ba5dd4f0380440","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"https://security.netapp.com/advisory/ntap-20200511-0003/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT211289","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-12243","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20200511-0003"},{"url":"https://usn.ubuntu.com/4352-1"},{"url":"https://usn.ubuntu.com/4352-2"},{"url":"https://github.com/advisories/GHSA-v3qx-x9jr-g987"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-12243","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2020-12243","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2025-1758636652.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2025-1758645818.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1777310722.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1777393215.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-12243","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0200.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26569","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24076","tags":["report"]},{"url":"https://lists.openldap.org/hyperkitty/list/openldap-announce@openldap.org/thread/NQ6OHLWNVRKIJU3HI5YGGAZL54H2RB73/","tags":["web"]},{"url":"https://lists.openldap.org/hyperkitty/list/openldap-announce@openldap.org/thread/VMMBUCQHEDF6QA4CDOONP2CDQEOR5YQA/","tags":["web"]},{"url":"https://lists.openldap.org/hyperkitty/list/openldap-announce@openldap.org/thread/FUOYA6YCHBXMLANBJMSO22JD2NB22WGC/","tags":["web","report"]},{"url":"https://lists.opensuse.org/opensuse-updates/2019-09/msg00113.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4041","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1833535","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4041.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-12243","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-12243","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201193-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1170771","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12243","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201210-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1143194","tags":["report"]},{"url":"https://bugzilla.suse.com/1143273","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13057","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13565","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201219-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-202014358-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-12243","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4352-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4352-2","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AH3RYISLVMAE2VXUYPS7XRVL5OOKGCKA/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-12243","description":"In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).","status":"published","published":"2020-04-28T18:07:29Z","modified":"2026-10-14T09:06:54.182Z","updated_at":"2026-11-02T14:35:53.236501Z"}],"euvd":[{"id":"EUVD-2020-4558","description":"In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).","status":"published","published":"2020-04-28T18:07:29Z","modified":"2026-10-14T09:06:54Z","updated_at":"2026-11-02T17:27:17.374818Z"}],"ghsa":[{"id":"GHSA-v3qx-x9jr-g987","title":"In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean...","description":"In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).","status":"published","published":"2022-05-24T17:16:45Z","modified":"2026-10-14T12:32:16Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400","CWE-674"],"updated_at":"2026-11-02T15:13:24.188405Z"}],"nvd":[{"id":"CVE-2020-12243","description":"In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).","status":"published","published":"2020-04-28T19:15:12.267Z","modified":"2026-10-14T10:17:25.933Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T14:05:59.718774Z"}],"osv":[{"id":"ALPINE-CVE-2020-12243","description":"In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).","status":"published","published":"2020-04-28T19:15:12.267Z","modified":"2026-10-26T11:17:55.105961298Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:48.11886Z"},{"id":"BELL-CVE-2020-12243","title":"CVE-2020-12243 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:50.154233Z","modified":"2026-03-05T07:15:23.3027Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2020-12243","description":"In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).","status":"published","published":"2020-04-28T19:15:12.267Z","modified":"2026-11-02T02:46:05.394950811Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:14.034736Z"},{"id":"DEBIAN-CVE-2020-12243","description":"In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).","status":"published","published":"2020-04-28T19:15:12.267Z","modified":"2026-10-26T12:01:25.449838241Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:32.862554Z"},{"id":"RHSA-2020:4041","title":"Red Hat Security Advisory: openldap security update","status":"published","published":"2024-09-16T04:29:06Z","modified":"2026-10-15T10:01:39Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"UBUNTU-CVE-2020-12243","description":"In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).","status":"published","published":"2020-04-28T19:15:00Z","modified":"2026-04-22T12:27:42.571649Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:22.804634Z"},{"id":"BIT-openldap-2020-12243","description":"In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).","status":"published","published":"2024-03-06T11:02:43.378Z","modified":"2026-09-08T08:48:16.747835833Z","updated_at":"2026-11-02T15:28:34.343258Z"},{"id":"CLSA-2025-1758636652","title":"openldap: Fix of 14 CVEs","description":"- Rebase to 2.4.58 to fix the following vulnerabilities:\n- CVE-2020-12243: fix denial of service caused by LDAP search filters with nested\n  boolean expressions\n- CVE-2020-36221: fix integer underflow in the Certificate Exact Assertion processing\n- CVE-2020-36223: fix slapd crash in the Values Return Filter control handling\n- CVE-2020-36226: fix slapd crash in the saslAuthzTo processing\n- CVE-2020-36228: fix slapd crash in the Certificate List Exact Assertion processing\n- CVE-2020-36225: fix double free and slapd crash in the saslAuthzTo processing\n- CVE-2020-36227: fix infinite loop in slapd with the cancel_extop Cancel operation\n- CVE-2020-36230: fix assertion failure in slapd in the X.509 DN parsing in decode.c\n- CVE-2020-25692: fix NULL pointer dereference during a request for renaming RDNs\n- CVE-2020-25709: fix assertion failure caused by processing malicious packet\n- CVE-2020-36224: fix invalid pointer free and slapd crash in the saslAuthzTo\n  processing\n- CVE-2020-36229: fix slapd crash in the X.509 DN parsing in ad_keystring\n- CVE-2020-25710: fix failed assertion in csnNormalize23()\n- CVE-2020-36222: fix assertion failure in slapd in the saslAuthzTo validation","status":"published","published":"2026-04-22T09:20:05Z","modified":"2026-10-21T10:48:17.543026662Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1758645818","title":"openldap: Fix of 14 CVEs","description":"- Rebase to 2.4.58 to fix the following vulnerabilities:\n- CVE-2020-12243: fix denial of service caused by LDAP search filters with nested\n  boolean expressions\n- CVE-2020-36221: fix integer underflow in the Certificate Exact Assertion processing\n- CVE-2020-36223: fix slapd crash in the Values Return Filter control handling\n- CVE-2020-36226: fix slapd crash in the saslAuthzTo processing\n- CVE-2020-36228: fix slapd crash in the Certificate List Exact Assertion processing\n- CVE-2020-36225: fix double free and slapd crash in the saslAuthzTo processing\n- CVE-2020-36227: fix infinite loop in slapd with the cancel_extop Cancel operation\n- CVE-2020-36230: fix assertion failure in slapd in the X.509 DN parsing in decode.c\n- CVE-2020-25692: fix NULL pointer dereference during a request for renaming RDNs\n- CVE-2020-25709: fix assertion failure caused by processing malicious packet\n- CVE-2020-36224: fix invalid pointer free and slapd crash in the saslAuthzTo\n  processing\n- CVE-2020-36229: fix slapd crash in the X.509 DN parsing in ad_keystring\n- CVE-2020-25710: fix failed assertion in csnNormalize23()\n- CVE-2020-36222: fix assertion failure in slapd in the saslAuthzTo validation","status":"published","published":"2026-04-23T20:31:57Z","modified":"2026-10-21T10:47:48.199517577Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2026-1777310722","title":"openldap: Fix of 15 CVEs","description":"- CVE-2019-13565: SASL session encryption SSF not reset on new connection, allowing downgrade\n- CVE-2020-12243: slapd crash via deeply nested LDAP search filter boolean expressions\n- CVE-2020-25692: NULL pointer dereference in slapd during modRDN request\n- CVE-2020-25709: slapd assertion failure via crafted certificate list validation\n- CVE-2020-25710: slapd assertion failure in obsolete csnNormalize23\n- CVE-2020-36221: slapd integer underflow crash in Certificate Exact Assertion processing\n- CVE-2020-36222: slapd assertion failure in saslAuthzTo validation\n- CVE-2020-36223: slapd double free crash in Values Return Filter control handling\n- CVE-2020-36224: slapd invalid pointer free and crash in saslAuthzTo processing\n- CVE-2020-36225: slapd double free crash in saslAuthzTo processing\n- CVE-2020-36226: slapd memch-\u003ebv_len miscalculation and crash in saslAuthzTo processing\n- CVE-2020-36227: slapd infinite loop via cancel_extop Cancel operation\n- CVE-2020-36228: slapd integer underflow crash in Certificate List Exact Assertion processing\n- CVE-2020-36229: slapd crash in X.509 DN parsing ad_keystring via ldap_X509dn2bv\n- CVE-2020-36230: slapd assertion failure in X.509 DN parsing ber_next_element in decode.c","status":"published","published":"2026-04-27T17:25:27Z","modified":"2026-06-01T00:33:23.608317789Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1777393215","title":"openldap: Fix of 15 CVEs","description":"- CVE-2019-13565: SASL session encryption SSF not reset on new connection, allowing downgrade\n- CVE-2020-12243: slapd crash via deeply nested LDAP search filter boolean expressions\n- CVE-2020-25692: NULL pointer dereference in slapd during modRDN request\n- CVE-2020-25709: slapd assertion failure via crafted certificate list validation\n- CVE-2020-25710: slapd assertion failure in obsolete csnNormalize23\n- CVE-2020-36221: slapd integer underflow crash in Certificate Exact Assertion processing\n- CVE-2020-36222: slapd assertion failure in saslAuthzTo validation\n- CVE-2020-36223: slapd double free crash in Values Return Filter control handling\n- CVE-2020-36224: slapd invalid pointer free and crash in saslAuthzTo processing\n- CVE-2020-36225: slapd double free crash in saslAuthzTo processing\n- CVE-2020-36226: slapd memch-\u003ebv_len miscalculation and crash in saslAuthzTo processing\n- CVE-2020-36227: slapd infinite loop via cancel_extop Cancel operation\n- CVE-2020-36228: slapd integer underflow crash in Certificate List Exact Assertion processing\n- CVE-2020-36229: slapd crash in X.509 DN parsing ad_keystring via ldap_X509dn2bv\n- CVE-2020-36230: slapd assertion failure in X.509 DN parsing ber_next_element in decode.c","status":"published","published":"2026-04-28T16:20:21Z","modified":"2026-06-01T00:33:12.568365854Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"DLA-2199-1","title":"openldap - security update","status":"published","published":"2020-05-02T00:00:00Z","modified":"2026-03-09T01:18:04.487514Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-4666-1","title":"openldap - security update","status":"published","published":"2020-04-28T00:00:00Z","modified":"2026-03-09T02:09:17.755316Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2020-0200","title":"Updated openldap packages fix security vulnerabilities","description":"Updated openldap packages fix security vulnerabilities:\n\nWhen both the nops module and the member of overlay are enabled, attempts to\nfree a buffer that was allocated on the stack, which allows remote attackers to\ncause a denial of service (slapd crash) via a member MODDN operation\n(CVE-2017-17740).\n\nIn filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested\nboolean expressions can result in denial of service (daemon crash)\n(CVE-2020-12243).\n\nThe nops overlay has been dropped from the package, fixing CVE-2017-17740.\n\nThe openldap package has been updated to version 2.4.50, fixing CVE-2020-12243\nand several other bugs.\n","status":"published","published":"2020-05-05T12:20:37Z","modified":"2026-04-16T04:42:55.246045153Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2020:0647-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\n- CVE-2020-12243: Fixed a denial of service related to recursive filters (bsc#1170771).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-05-10T22:16:48Z","modified":"2026-02-04T02:29:28.836684Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"SUSE-SU-2020:1193-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\n- CVE-2020-12243: Fixed a denial of service related to recursive filters (bsc#1170771).\n","status":"published","published":"2020-05-05T14:26:54Z","modified":"2026-02-04T03:17:04.324003Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1210-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\n- CVE-2020-12243: Fixed a denial of service related to recursive filters (bsc#1170771).\n- CVE-2019-13565: Fixed an authentication bypass caused by incorrect authorization of another connection, granting excess connection rights (bsc#1143194).\n- CVE-2019-13057: Fixed an issue with improper authorization with delegated database admin privileges (bsc#1143273).\n","status":"published","published":"2020-05-07T08:38:25Z","modified":"2026-02-04T04:39:44.568845Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1219-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\n- CVE-2020-12243: Fixed a denial of service related to recursive filters (bsc#1170771).\n","status":"published","published":"2020-05-07T15:11:10Z","modified":"2025-05-02T04:09:39.493192Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:14358-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\n- CVE-2020-12243: Fixed a denial of service related to recursive filters (bsc#1170771).\n","status":"published","published":"2020-05-07T10:09:32Z","modified":"2026-02-04T02:14:31.858973Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"USN-4352-1","title":"openldap vulnerability","description":"It was discovered that OpenLDAP incorrectly handled certain queries. A\nremote attacker could possibly use this issue to cause OpenLDAP to consume\nresources, resulting in a denial of service.\n","status":"published","published":"2020-05-06T15:27:11Z","modified":"2026-04-22T10:03:31.976702Z","updated_at":"2026-11-02T16:58:14.547547Z"},{"id":"USN-4352-2","title":"openldap vulnerability","description":"USN-4352-1 fixed a vulnerability in OpenLDAP. This update provides\nthe corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that OpenLDAP incorrectly handled certain queries. A\n remote attacker could possibly use this issue to cause OpenLDAP to consume\n resources, resulting in a denial of service.\n","status":"published","published":"2020-05-06T17:31:49Z","modified":"2026-04-22T10:04:28.970107Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}