{"id":"CVE-2020-25709","aliases":["ALPINE-CVE-2020-25709","BELL-CVE-2020-25709","BIT-openldap-2020-25709","CLSA-2025-1758636652","CLSA-2025-1758645818","CLSA-2026-1777310722","CLSA-2026-1777393215","DEBIAN-CVE-2020-25709","DLA-2481-1","DSA-4792-1","EUVD-2020-18364","GHSA-cpm7-pgmm-3mfr","JLSEC-2026-161","MGASA-2021-0046","RHSA-2022:0621","SUSE-SU-2021:0128-1","SUSE-SU-2021:0129-1","SUSE-SU-2021:0142-1","SUSE-SU-2021:14597-1","UBUNTU-CVE-2020-25709","USN-4634-1","USN-4634-2","openSUSE-SU-2021:0102-1","openSUSE-SU-2021:0107-1"],"status":"published","title":"A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be...","description":"A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03438,"percentile":0.89059,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-617"],"published":"2020-11-13T00:00:00Z","modified":"2026-11-02T02:45:55Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"openldap","fixed_in":["2.4.48-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"openldap","fixed_in":["2.4.48-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"openldap","fixed_in":["2.4.50-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"openldap","fixed_in":["2.4.56-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"openldap","fixed_in":["2.4.56-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"openldap","fixed_in":["2.4.56-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openldap","fixed_in":["2.4.56-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openldap","fixed_in":["2.4.56-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openldap","fixed_in":["2.4.56-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openldap","fixed_in":["2.4.56-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openldap","fixed_in":["2.4.56-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openldap","fixed_in":["2.4.56-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openldap","fixed_in":["2.4.56-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openldap","fixed_in":["2.4.56-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openldap","fixed_in":["2.4.56-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"openldap","fixed_in":["2.4.48-r2"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"openldap","fixed_in":["2.4.56"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"openldap","fixed_in":["2.4.56+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openldap","fixed_in":["2.4.56+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openldap","fixed_in":["2.4.56+dfsg-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"OpenLDAPClient_jll","fixed_in":["2.5.14+0"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openldap","fixed_in":["2.4.31-1+nmu2ubuntu8.5+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"openldap","fixed_in":["2.4.42+dfsg-2ubuntu3.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"openldap","fixed_in":["2.4.45+dfsg-1ubuntu1.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"openldap","fixed_in":["2.4.49+dfsg-2ubuntu1.5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.48-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.48-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.48-r2"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"openldap","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.4.56"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-18.el8.tuxcare.els4"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-18.el8.tuxcare.els4"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-18.el8.tuxcare.els4"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-18.el8.tuxcare.els4"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-17.el8_4.tuxcare.els4"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-17.el8_4.tuxcare.els4"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-17.el8_4.tuxcare.els4"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-17.el8_4.tuxcare.els4"}]}],"bundled":15},{"source":"osv","ecosystem":"Debian:12","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44+dfsg-5+deb9u6"}]}],"versions":["2.4.44+dfsg-5","2.4.44+dfsg-5+deb9u1","2.4.44+dfsg-5+deb9u1~bpo8+1","2.4.44+dfsg-5+deb9u2","2.4.44+dfsg-5+deb9u3","2.4.44+dfsg-5+deb9u4","2.4.44+dfsg-5+deb9u5"],"bundled":2},{"source":"osv","ecosystem":"Debian:10","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.47+dfsg-3+deb10u4"}]}],"versions":["2.4.47+dfsg-3","2.4.47+dfsg-3+deb10u1","2.4.47+dfsg-3+deb10u1~bpo9+1","2.4.47+dfsg-3+deb10u2","2.4.47+dfsg-3+deb10u2~bpo9+1","2.4.47+dfsg-3+deb10u3"],"bundled":2},{"source":"osv","ecosystem":"Julia","package":"OpenLDAPClient_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.5.14+0"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-1.3.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.80.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.80.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.80.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.45.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.45.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP2","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.45.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 12","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.24.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.24.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.24.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.24.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.24.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11-SECURITY","package":"openldap2-client-openssl1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-0.74.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.31-1+nmu2ubuntu8.5+esm4"}]}],"versions":["2.4.31-1+nmu2ubuntu3","2.4.31-1+nmu2ubuntu4","2.4.31-1+nmu2ubuntu5","2.4.31-1+nmu2ubuntu8","2.4.31-1+nmu2ubuntu8.1","2.4.31-1+nmu2ubuntu8.2","2.4.31-1+nmu2ubuntu8.3","2.4.31-1+nmu2ubuntu8.4","2.4.31-1+nmu2ubuntu8.5","2.4.31-1+nmu2ubuntu8.5+esm1","2.4.31-1+nmu2ubuntu8.5+esm2","2.4.31-1+nmu2ubuntu8.5+esm3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.42+dfsg-2ubuntu3.11"}]}],"versions":["2.4.41+dfsg-1ubuntu2","2.4.41+dfsg-1ubuntu3","2.4.42+dfsg-2ubuntu1","2.4.42+dfsg-2ubuntu3","2.4.42+dfsg-2ubuntu3.1","2.4.42+dfsg-2ubuntu3.2","2.4.42+dfsg-2ubuntu3.3","2.4.42+dfsg-2ubuntu3.4","2.4.42+dfsg-2ubuntu3.5","2.4.42+dfsg-2ubuntu3.6","2.4.42+dfsg-2ubuntu3.7","2.4.42+dfsg-2ubuntu3.8","2.4.42+dfsg-2ubuntu3.9","2.4.42+dfsg-2ubuntu3.10"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.45+dfsg-1ubuntu1.8"}]}],"versions":["2.4.45+dfsg-1ubuntu1","2.4.45+dfsg-1ubuntu1.1","2.4.45+dfsg-1ubuntu1.2","2.4.45+dfsg-1ubuntu1.3","2.4.45+dfsg-1ubuntu1.4","2.4.45+dfsg-1ubuntu1.5","2.4.45+dfsg-1ubuntu1.6","2.4.45+dfsg-1ubuntu1.7"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49+dfsg-2ubuntu1.5"}]}],"versions":["2.4.48+dfsg-1ubuntu1","2.4.48+dfsg-1ubuntu2","2.4.48+dfsg-1ubuntu3","2.4.48+dfsg-1ubuntu4","2.4.49+dfsg-1ubuntu1","2.4.49+dfsg-2ubuntu1","2.4.49+dfsg-2ubuntu1.2","2.4.49+dfsg-2ubuntu1.3","2.4.49+dfsg-2ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.42+dfsg-2ubuntu3.11"}]}],"versions":["2.4.41+dfsg-1ubuntu2","2.4.41+dfsg-1ubuntu3","2.4.42+dfsg-2ubuntu1","2.4.42+dfsg-2ubuntu3","2.4.42+dfsg-2ubuntu3.1","2.4.42+dfsg-2ubuntu3.2","2.4.42+dfsg-2ubuntu3.3","2.4.42+dfsg-2ubuntu3.4","2.4.42+dfsg-2ubuntu3.5","2.4.42+dfsg-2ubuntu3.6","2.4.42+dfsg-2ubuntu3.7","2.4.42+dfsg-2ubuntu3.8","2.4.42+dfsg-2ubuntu3.9","2.4.42+dfsg-2ubuntu3.10"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.45+dfsg-1ubuntu1.8"}]}],"versions":["2.4.45+dfsg-1ubuntu1","2.4.45+dfsg-1ubuntu1.1","2.4.45+dfsg-1ubuntu1.2","2.4.45+dfsg-1ubuntu1.3","2.4.45+dfsg-1ubuntu1.4","2.4.45+dfsg-1ubuntu1.5","2.4.45+dfsg-1ubuntu1.6","2.4.45+dfsg-1ubuntu1.7"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49+dfsg-2ubuntu1.5"}]}],"versions":["2.4.48+dfsg-1ubuntu1","2.4.48+dfsg-1ubuntu2","2.4.48+dfsg-1ubuntu3","2.4.48+dfsg-1ubuntu4","2.4.49+dfsg-1ubuntu1","2.4.49+dfsg-2ubuntu1","2.4.49+dfsg-2ubuntu1.2","2.4.49+dfsg-2ubuntu1.3","2.4.49+dfsg-2ubuntu1.4"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.31-1+nmu2ubuntu8.5+esm4"}]}],"versions":["2.4.31-1+nmu2ubuntu3","2.4.31-1+nmu2ubuntu4","2.4.31-1+nmu2ubuntu5","2.4.31-1+nmu2ubuntu8","2.4.31-1+nmu2ubuntu8.1","2.4.31-1+nmu2ubuntu8.2","2.4.31-1+nmu2ubuntu8.3","2.4.31-1+nmu2ubuntu8.4","2.4.31-1+nmu2ubuntu8.5","2.4.31-1+nmu2ubuntu8.5+esm1","2.4.31-1+nmu2ubuntu8.5+esm2","2.4.31-1+nmu2ubuntu8.5+esm3"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-lp151.10.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-lp152.14.15.1"}]}],"bundled":2}],"products":[{"vendor":"apple","product":"mac_os_x"},{"vendor":"apple","product":"macos"},{"vendor":"debian","product":"debian_linux"},{"vendor":"openldap","product":"openldap"},{"vendor":"openldap foundation","product":"openldap"},{"vendor":"redhat","product":"jboss_core_services"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://www.debian.org/security/2020/dsa-4792","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/12/msg00008.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://support.apple.com/kb/HT212147","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://seclists.org/fulldisclosure/2021/Feb/14","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1899675","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","advisory","fix","web","report"]},{"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://security.netapp.com/advisory/ntap-20210716-0003/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25709","tags":["web","advisory"]},{"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E"},{"url":"https://security.netapp.com/advisory/ntap-20210716-0003"},{"url":"https://github.com/advisories/GHSA-cpm7-pgmm-3mfr"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-25709","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2020-25709","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2025-1758636652.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2025-1758645818.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1777310722.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1777393215.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-25709","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0046.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=27625","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4634-1","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0621","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1899678","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0621.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25709","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25709","tags":["advisory","report"]},{"url":"https://git.openldap.org/openldap/openldap/-/commit/ab3915154e69920d480205b4bf5ccb2b391a0a1f#a2feb6ed0257c21c6672793ee2f94eaadc10c72c","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25710","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25710","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25710","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210128-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1178909","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25710","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210129-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1179503","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210142-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-202114597-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-25709","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4634-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-25710","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HXI5DVBGML6XRCQGGMOYKQFUJDZ2JPS6/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DU5LAY3LI5VYENQTLYA5AGNA47GQHI2B/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-25709","description":"A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.","status":"published","published":"2021-05-18T11:51:42Z","modified":"2026-10-14T09:35:25.6Z","updated_at":"2026-11-02T14:35:48.854892Z"}],"euvd":[{"id":"EUVD-2020-18364","description":"A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.","status":"published","published":"2021-05-18T11:51:42Z","modified":"2026-10-14T09:35:25Z","updated_at":"2026-11-02T17:27:16.85534Z"}],"ghsa":[{"id":"GHSA-cpm7-pgmm-3mfr","title":"A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be...","description":"A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.","status":"published","published":"2022-05-24T22:28:33Z","modified":"2026-10-14T12:32:25Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T15:13:24.812204Z"}],"nvd":[{"id":"CVE-2020-25709","description":"A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.","status":"published","published":"2021-05-18T12:15:07.673Z","modified":"2026-10-14T10:17:33.163Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T14:06:39.25999Z"}],"osv":[{"id":"ALPINE-CVE-2020-25709","description":"A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.","status":"published","published":"2021-05-18T12:15:07.673Z","modified":"2026-10-26T11:17:55.158288138Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:48.11886Z"},{"id":"BELL-CVE-2020-25709","title":"CVE-2020-25709 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:35.737715Z","modified":"2026-03-05T07:15:23.590782Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2020-25709","description":"A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.","status":"published","published":"2021-05-18T12:15:07.673Z","modified":"2026-11-02T02:45:55.252065222Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:15.879068Z"},{"id":"DEBIAN-CVE-2020-25709","description":"A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.","status":"published","published":"2021-05-18T12:15:07.673Z","modified":"2026-10-26T12:02:30.033970881Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:33.729655Z"},{"id":"JLSEC-2026-161","description":"A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.","status":"published","published":"2026-04-21T00:04:14.628Z","modified":"2026-07-18T00:01:35.287902462Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.159338Z"},{"id":"RHSA-2022:0621","title":"Red Hat Security Advisory: openldap security update","status":"published","published":"2024-09-16T07:06:33Z","modified":"2026-08-04T10:04:27Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"UBUNTU-CVE-2020-25709","description":"A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.","status":"published","published":"2020-11-13T00:00:00Z","modified":"2026-04-22T12:35:57.593628Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:23.905183Z"},{"id":"BIT-openldap-2020-25709","description":"A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.","status":"published","published":"2024-03-06T11:02:11.585Z","modified":"2026-09-08T08:48:16.657774837Z","updated_at":"2026-11-02T15:28:34.343258Z"},{"id":"CLSA-2025-1758636652","title":"openldap: Fix of 14 CVEs","description":"- Rebase to 2.4.58 to fix the following vulnerabilities:\n- CVE-2020-12243: fix denial of service caused by LDAP search filters with nested\n  boolean expressions\n- CVE-2020-36221: fix integer underflow in the Certificate Exact Assertion processing\n- CVE-2020-36223: fix slapd crash in the Values Return Filter control handling\n- CVE-2020-36226: fix slapd crash in the saslAuthzTo processing\n- CVE-2020-36228: fix slapd crash in the Certificate List Exact Assertion processing\n- CVE-2020-36225: fix double free and slapd crash in the saslAuthzTo processing\n- CVE-2020-36227: fix infinite loop in slapd with the cancel_extop Cancel operation\n- CVE-2020-36230: fix assertion failure in slapd in the X.509 DN parsing in decode.c\n- CVE-2020-25692: fix NULL pointer dereference during a request for renaming RDNs\n- CVE-2020-25709: fix assertion failure caused by processing malicious packet\n- CVE-2020-36224: fix invalid pointer free and slapd crash in the saslAuthzTo\n  processing\n- CVE-2020-36229: fix slapd crash in the X.509 DN parsing in ad_keystring\n- CVE-2020-25710: fix failed assertion in csnNormalize23()\n- CVE-2020-36222: fix assertion failure in slapd in the saslAuthzTo validation","status":"published","published":"2026-04-22T09:20:05Z","modified":"2026-10-21T10:48:17.543026662Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1758645818","title":"openldap: Fix of 14 CVEs","description":"- Rebase to 2.4.58 to fix the following vulnerabilities:\n- CVE-2020-12243: fix denial of service caused by LDAP search filters with nested\n  boolean expressions\n- CVE-2020-36221: fix integer underflow in the Certificate Exact Assertion processing\n- CVE-2020-36223: fix slapd crash in the Values Return Filter control handling\n- CVE-2020-36226: fix slapd crash in the saslAuthzTo processing\n- CVE-2020-36228: fix slapd crash in the Certificate List Exact Assertion processing\n- CVE-2020-36225: fix double free and slapd crash in the saslAuthzTo processing\n- CVE-2020-36227: fix infinite loop in slapd with the cancel_extop Cancel operation\n- CVE-2020-36230: fix assertion failure in slapd in the X.509 DN parsing in decode.c\n- CVE-2020-25692: fix NULL pointer dereference during a request for renaming RDNs\n- CVE-2020-25709: fix assertion failure caused by processing malicious packet\n- CVE-2020-36224: fix invalid pointer free and slapd crash in the saslAuthzTo\n  processing\n- CVE-2020-36229: fix slapd crash in the X.509 DN parsing in ad_keystring\n- CVE-2020-25710: fix failed assertion in csnNormalize23()\n- CVE-2020-36222: fix assertion failure in slapd in the saslAuthzTo validation","status":"published","published":"2026-04-23T20:31:57Z","modified":"2026-10-21T10:47:48.199517577Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2026-1777310722","title":"openldap: Fix of 15 CVEs","description":"- CVE-2019-13565: SASL session encryption SSF not reset on new connection, allowing downgrade\n- CVE-2020-12243: slapd crash via deeply nested LDAP search filter boolean expressions\n- CVE-2020-25692: NULL pointer dereference in slapd during modRDN request\n- CVE-2020-25709: slapd assertion failure via crafted certificate list validation\n- CVE-2020-25710: slapd assertion failure in obsolete csnNormalize23\n- CVE-2020-36221: slapd integer underflow crash in Certificate Exact Assertion processing\n- CVE-2020-36222: slapd assertion failure in saslAuthzTo validation\n- CVE-2020-36223: slapd double free crash in Values Return Filter control handling\n- CVE-2020-36224: slapd invalid pointer free and crash in saslAuthzTo processing\n- CVE-2020-36225: slapd double free crash in saslAuthzTo processing\n- CVE-2020-36226: slapd memch-\u003ebv_len miscalculation and crash in saslAuthzTo processing\n- CVE-2020-36227: slapd infinite loop via cancel_extop Cancel operation\n- CVE-2020-36228: slapd integer underflow crash in Certificate List Exact Assertion processing\n- CVE-2020-36229: slapd crash in X.509 DN parsing ad_keystring via ldap_X509dn2bv\n- CVE-2020-36230: slapd assertion failure in X.509 DN parsing ber_next_element in decode.c","status":"published","published":"2026-04-27T17:25:27Z","modified":"2026-06-01T00:33:23.608317789Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1777393215","title":"openldap: Fix of 15 CVEs","description":"- CVE-2019-13565: SASL session encryption SSF not reset on new connection, allowing downgrade\n- CVE-2020-12243: slapd crash via deeply nested LDAP search filter boolean expressions\n- CVE-2020-25692: NULL pointer dereference in slapd during modRDN request\n- CVE-2020-25709: slapd assertion failure via crafted certificate list validation\n- CVE-2020-25710: slapd assertion failure in obsolete csnNormalize23\n- CVE-2020-36221: slapd integer underflow crash in Certificate Exact Assertion processing\n- CVE-2020-36222: slapd assertion failure in saslAuthzTo validation\n- CVE-2020-36223: slapd double free crash in Values Return Filter control handling\n- CVE-2020-36224: slapd invalid pointer free and crash in saslAuthzTo processing\n- CVE-2020-36225: slapd double free crash in saslAuthzTo processing\n- CVE-2020-36226: slapd memch-\u003ebv_len miscalculation and crash in saslAuthzTo processing\n- CVE-2020-36227: slapd infinite loop via cancel_extop Cancel operation\n- CVE-2020-36228: slapd integer underflow crash in Certificate List Exact Assertion processing\n- CVE-2020-36229: slapd crash in X.509 DN parsing ad_keystring via ldap_X509dn2bv\n- CVE-2020-36230: slapd assertion failure in X.509 DN parsing ber_next_element in decode.c","status":"published","published":"2026-04-28T16:20:21Z","modified":"2026-06-01T00:33:12.568365854Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"DLA-2481-1","title":"openldap - security update","status":"published","published":"2020-12-04T00:00:00Z","modified":"2026-03-09T01:17:58.167234Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-4792-1","title":"openldap - security update","status":"published","published":"2020-11-17T00:00:00Z","modified":"2026-03-09T02:10:44.602331Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2021-0046","title":"Updated openldap packages fix security vulnerabilities","description":"It was discovered that OpenLDAP incorrectly handled certain malformed inputs.\nA remote attacker could possibly use this issue to cause OpenLDAP to crash,\nresulting in a denial of service (CVE-2020-25709, CVE-2020-25710).\n","status":"published","published":"2021-01-19T15:40:16Z","modified":"2026-04-16T04:40:47.113235671Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2021:0102-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909).\n- CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909).\n\nNon-security issue fixed:\n\n- Retry binds in the LDAP backend when the remote LDAP server disconnected the (idle) LDAP connection. (bsc#1179503)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-01-17T17:23:38Z","modified":"2026-02-04T03:20:23.717825Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2021:0107-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909).\n- CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909).\n\nNon-security issue fixed:\n\n- Retry binds in the LDAP backend when the remote LDAP server disconnected the (idle) LDAP connection. (bsc#1179503)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-01-18T09:22:40Z","modified":"2026-02-04T02:15:25.630895Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"SUSE-SU-2021:0128-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\n- CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909).\n- CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909).\n","status":"published","published":"2021-01-14T10:01:29Z","modified":"2026-02-04T03:59:21.810197Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0129-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909).\n- CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909).\n\nNon-security issue fixed:\n\n- Retry binds in the LDAP backend when the remote LDAP server disconnected the (idle) LDAP connection. (bsc#1179503)\n","status":"published","published":"2021-01-14T11:26:28Z","modified":"2025-05-02T04:30:40.365579Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0142-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\n- CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909).\n- CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909).\n","status":"published","published":"2021-01-15T12:02:13Z","modified":"2026-02-04T03:11:45.772071Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:14597-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\n- CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909).\n- CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909).\n","status":"published","published":"2021-01-14T12:43:57Z","modified":"2026-02-04T02:58:05.827314Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"USN-4634-1","title":"openldap vulnerabilities","description":"It was discovered that OpenLDAP incorrectly handled certain malformed\ninputs. A remote attacker could possibly use this issue to cause OpenLDAP\nto crash, resulting in a denial of service.\n","status":"published","published":"2020-11-17T13:10:04Z","modified":"2026-04-22T10:09:45.249089Z","updated_at":"2026-11-02T16:58:15.159055Z"},{"id":"USN-4634-2","title":"openldap vulnerabilities","description":"USN-4634-1 fixed several vulnerabilities in OpenLDAP. This update provides\nthe corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that OpenLDAP incorrectly handled certain malformed\n inputs. A remote attacker could possibly use this issue to cause OpenLDAP\n to crash, resulting in a denial of service.\n","status":"published","published":"2020-11-23T12:04:32Z","modified":"2026-04-22T10:08:53.385418Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}