{"id":"CVE-2020-25710","aliases":["ALPINE-CVE-2020-25710","BELL-CVE-2020-25710","BIT-openldap-2020-25710","CLSA-2025-1758636652","CLSA-2025-1758645818","CLSA-2026-1777310722","CLSA-2026-1777393215","DEBIAN-CVE-2020-25710","DLA-2481-1","DSA-4792-1","EUVD-2020-18365","GHSA-8wg3-gqcw-9fq9","JLSEC-2026-162","MGASA-2021-0046","OESA-2021-1244","RHSA-2022:0621","SUSE-SU-2021:0128-1","SUSE-SU-2021:0129-1","SUSE-SU-2021:0142-1","SUSE-SU-2021:14597-1","UBUNTU-CVE-2020-25710","USN-4634-1","USN-4634-2","openSUSE-SU-2021:0102-1","openSUSE-SU-2021:0107-1"],"status":"published","title":"A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a...","description":"A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.02728,"percentile":0.86263,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-617"],"published":"2020-11-13T00:00:00Z","modified":"2026-11-02T02:46:06Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"openldap","fixed_in":["2.4.48-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"openldap","fixed_in":["2.4.48-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"openldap","fixed_in":["2.4.50-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"openldap","fixed_in":["2.4.56-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"openldap","fixed_in":["2.4.56-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"openldap","fixed_in":["2.4.56-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openldap","fixed_in":["2.4.56-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openldap","fixed_in":["2.4.56-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openldap","fixed_in":["2.4.56-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openldap","fixed_in":["2.4.56-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openldap","fixed_in":["2.4.56-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openldap","fixed_in":["2.4.56-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openldap","fixed_in":["2.4.56-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openldap","fixed_in":["2.4.56-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openldap","fixed_in":["2.4.56-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"openldap","fixed_in":["2.4.48-r2"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"openldap","fixed_in":["2.4.56"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"openldap","fixed_in":["2.4.56+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openldap","fixed_in":["2.4.56+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openldap","fixed_in":["2.4.56+dfsg-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"OpenLDAPClient_jll","fixed_in":["2.5.14+0"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"openldap","fixed_in":["2.4.50-6.oe1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openldap","fixed_in":["2.4.31-1+nmu2ubuntu8.5+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"openldap","fixed_in":["2.4.42+dfsg-2ubuntu3.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"openldap","fixed_in":["2.4.45+dfsg-1ubuntu1.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"openldap","fixed_in":["2.4.49+dfsg-2ubuntu1.5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.48-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.48-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.48-r2"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"openldap","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.4.56"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1.el6.tuxcare.els1"}]}],"bundled":14},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-18.el8.tuxcare.els4"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-18.el8.tuxcare.els4"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-18.el8.tuxcare.els4"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-18.el8.tuxcare.els4"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-17.el8_4.tuxcare.els4"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-17.el8_4.tuxcare.els4"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-17.el8_4.tuxcare.els4"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-17.el8_4.tuxcare.els4"}]}],"bundled":15},{"source":"osv","ecosystem":"Debian:12","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44+dfsg-5+deb9u6"}]}],"versions":["2.4.44+dfsg-5","2.4.44+dfsg-5+deb9u1","2.4.44+dfsg-5+deb9u1~bpo8+1","2.4.44+dfsg-5+deb9u2","2.4.44+dfsg-5+deb9u3","2.4.44+dfsg-5+deb9u4","2.4.44+dfsg-5+deb9u5"],"bundled":2},{"source":"osv","ecosystem":"Debian:10","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.47+dfsg-3+deb10u4"}]}],"versions":["2.4.47+dfsg-3","2.4.47+dfsg-3+deb10u1","2.4.47+dfsg-3+deb10u1~bpo9+1","2.4.47+dfsg-3+deb10u2","2.4.47+dfsg-3+deb10u2~bpo9+1","2.4.47+dfsg-3+deb10u3"],"bundled":2},{"source":"osv","ecosystem":"Julia","package":"OpenLDAPClient_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.5.14+0"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-1.3.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-6.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.44-25.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.80.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.80.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.80.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.45.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.45.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP2","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.45.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 12","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.24.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.24.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.24.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.24.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.24.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11-SECURITY","package":"openldap2-client-openssl1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-0.74.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.31-1+nmu2ubuntu8.5+esm4"}]}],"versions":["2.4.31-1+nmu2ubuntu3","2.4.31-1+nmu2ubuntu4","2.4.31-1+nmu2ubuntu5","2.4.31-1+nmu2ubuntu8","2.4.31-1+nmu2ubuntu8.1","2.4.31-1+nmu2ubuntu8.2","2.4.31-1+nmu2ubuntu8.3","2.4.31-1+nmu2ubuntu8.4","2.4.31-1+nmu2ubuntu8.5","2.4.31-1+nmu2ubuntu8.5+esm1","2.4.31-1+nmu2ubuntu8.5+esm2","2.4.31-1+nmu2ubuntu8.5+esm3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.42+dfsg-2ubuntu3.11"}]}],"versions":["2.4.41+dfsg-1ubuntu2","2.4.41+dfsg-1ubuntu3","2.4.42+dfsg-2ubuntu1","2.4.42+dfsg-2ubuntu3","2.4.42+dfsg-2ubuntu3.1","2.4.42+dfsg-2ubuntu3.2","2.4.42+dfsg-2ubuntu3.3","2.4.42+dfsg-2ubuntu3.4","2.4.42+dfsg-2ubuntu3.5","2.4.42+dfsg-2ubuntu3.6","2.4.42+dfsg-2ubuntu3.7","2.4.42+dfsg-2ubuntu3.8","2.4.42+dfsg-2ubuntu3.9","2.4.42+dfsg-2ubuntu3.10"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.45+dfsg-1ubuntu1.8"}]}],"versions":["2.4.45+dfsg-1ubuntu1","2.4.45+dfsg-1ubuntu1.1","2.4.45+dfsg-1ubuntu1.2","2.4.45+dfsg-1ubuntu1.3","2.4.45+dfsg-1ubuntu1.4","2.4.45+dfsg-1ubuntu1.5","2.4.45+dfsg-1ubuntu1.6","2.4.45+dfsg-1ubuntu1.7"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49+dfsg-2ubuntu1.5"}]}],"versions":["2.4.48+dfsg-1ubuntu1","2.4.48+dfsg-1ubuntu2","2.4.48+dfsg-1ubuntu3","2.4.48+dfsg-1ubuntu4","2.4.49+dfsg-1ubuntu1","2.4.49+dfsg-2ubuntu1","2.4.49+dfsg-2ubuntu1.2","2.4.49+dfsg-2ubuntu1.3","2.4.49+dfsg-2ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.42+dfsg-2ubuntu3.11"}]}],"versions":["2.4.41+dfsg-1ubuntu2","2.4.41+dfsg-1ubuntu3","2.4.42+dfsg-2ubuntu1","2.4.42+dfsg-2ubuntu3","2.4.42+dfsg-2ubuntu3.1","2.4.42+dfsg-2ubuntu3.2","2.4.42+dfsg-2ubuntu3.3","2.4.42+dfsg-2ubuntu3.4","2.4.42+dfsg-2ubuntu3.5","2.4.42+dfsg-2ubuntu3.6","2.4.42+dfsg-2ubuntu3.7","2.4.42+dfsg-2ubuntu3.8","2.4.42+dfsg-2ubuntu3.9","2.4.42+dfsg-2ubuntu3.10"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.45+dfsg-1ubuntu1.8"}]}],"versions":["2.4.45+dfsg-1ubuntu1","2.4.45+dfsg-1ubuntu1.1","2.4.45+dfsg-1ubuntu1.2","2.4.45+dfsg-1ubuntu1.3","2.4.45+dfsg-1ubuntu1.4","2.4.45+dfsg-1ubuntu1.5","2.4.45+dfsg-1ubuntu1.6","2.4.45+dfsg-1ubuntu1.7"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49+dfsg-2ubuntu1.5"}]}],"versions":["2.4.48+dfsg-1ubuntu1","2.4.48+dfsg-1ubuntu2","2.4.48+dfsg-1ubuntu3","2.4.48+dfsg-1ubuntu4","2.4.49+dfsg-1ubuntu1","2.4.49+dfsg-2ubuntu1","2.4.49+dfsg-2ubuntu1.2","2.4.49+dfsg-2ubuntu1.3","2.4.49+dfsg-2ubuntu1.4"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.31-1+nmu2ubuntu8.5+esm4"}]}],"versions":["2.4.31-1+nmu2ubuntu3","2.4.31-1+nmu2ubuntu4","2.4.31-1+nmu2ubuntu5","2.4.31-1+nmu2ubuntu8","2.4.31-1+nmu2ubuntu8.1","2.4.31-1+nmu2ubuntu8.2","2.4.31-1+nmu2ubuntu8.3","2.4.31-1+nmu2ubuntu8.4","2.4.31-1+nmu2ubuntu8.5","2.4.31-1+nmu2ubuntu8.5+esm1","2.4.31-1+nmu2ubuntu8.5+esm2","2.4.31-1+nmu2ubuntu8.5+esm3"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-lp151.10.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-lp152.14.15.1"}]}],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"openldap","product":"openldap"},{"vendor":"openldap foundation","product":"openldap"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"jboss_core_services"},{"vendor":"redhat","product":"jboss_enterprise_application_platform"},{"vendor":"redhat","product":"jboss_enterprise_web_server"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://www.debian.org/security/2020/dsa-4792","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/12/msg00008.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1899678","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","advisory","fix","web","report"]},{"url":"https://git.openldap.org/openldap/openldap/-/commit/ab3915154e69920d480205b4bf5ccb2b391a0a1f#a2feb6ed0257c21c6672793ee2f94eaadc10c72c","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","advisory","fix","web","article"]},{"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://security.netapp.com/advisory/ntap-20210716-0003/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25710","tags":["web","advisory"]},{"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E"},{"url":"https://security.netapp.com/advisory/ntap-20210716-0003"},{"url":"https://github.com/advisories/GHSA-8wg3-gqcw-9fq9"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-25710","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2020-25710","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2025-1758636652.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2025-1758645818.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1777310722.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1777393215.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-25710","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0046.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=27625","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4634-1","tags":["advisory"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1244","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0621","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1899675","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0621.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25709","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25709","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25709","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25710","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25710","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210128-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1178909","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25710","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210129-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1179503","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210142-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-202114597-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-25710","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4634-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-25709","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HXI5DVBGML6XRCQGGMOYKQFUJDZ2JPS6/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DU5LAY3LI5VYENQTLYA5AGNA47GQHI2B/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-25710","description":"A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.","status":"published","published":"2021-05-28T10:20:20Z","modified":"2026-10-14T09:35:27.119Z","cwes":["CWE-617"],"updated_at":"2026-11-02T14:35:48.52216Z"}],"euvd":[{"id":"EUVD-2020-18365","description":"A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.","status":"published","published":"2021-05-28T10:20:20Z","modified":"2026-10-14T09:35:27Z","updated_at":"2026-11-02T17:27:16.85534Z"}],"ghsa":[{"id":"GHSA-8wg3-gqcw-9fq9","title":"A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a...","description":"A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.","status":"published","published":"2022-05-24T19:03:39Z","modified":"2026-10-14T12:32:25Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T15:13:24.812204Z"}],"nvd":[{"id":"CVE-2020-25710","description":"A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.","status":"published","published":"2021-05-28T11:15:07.593Z","modified":"2026-10-14T10:17:33.353Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T14:06:43.288951Z"}],"osv":[{"id":"ALPINE-CVE-2020-25710","description":"A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.","status":"published","published":"2021-05-28T11:15:07.593Z","modified":"2026-10-26T11:17:55.158422376Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:48.11886Z"},{"id":"BELL-CVE-2020-25710","title":"CVE-2020-25710 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:28.296926Z","modified":"2026-03-05T07:15:23.755022Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2020-25710","description":"A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.","status":"published","published":"2021-05-28T11:15:07.593Z","modified":"2026-11-02T02:46:06.156440984Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:15.879068Z"},{"id":"DEBIAN-CVE-2020-25710","description":"A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.","status":"published","published":"2021-05-28T11:15:07.593Z","modified":"2026-10-26T12:02:30.043152889Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:33.729655Z"},{"id":"JLSEC-2026-162","description":"A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.","status":"published","published":"2026-04-21T00:04:14.628Z","modified":"2026-07-18T00:01:35.397409845Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.159338Z"},{"id":"OESA-2021-1244","title":"openldap security update","description":"OpenLDAP is an open source suite of LDAP (Lightweight Directory Access Protocol) applications and development tools. LDAP is a set of protocols for accessing directory services (usually phone book style information, but other information is possible) over the Internet, similar to the way DNS (Domain Name System) information is propagated over the Internet. The openldap package contains configuration files, libraries, and documentation for OpenLDAP.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.(CVE-2020-25710)","status":"published","published":"2021-06-26T11:04:29Z","modified":"2026-08-18T01:15:11.709827078Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2022:0621","title":"Red Hat Security Advisory: openldap security update","status":"published","published":"2024-09-16T07:06:33Z","modified":"2026-08-04T10:04:27Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"UBUNTU-CVE-2020-25710","description":"A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.","status":"published","published":"2020-11-13T00:00:00Z","modified":"2026-04-22T12:36:40.621511Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:23.905183Z"},{"id":"BIT-openldap-2020-25710","description":"A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.","status":"published","published":"2024-03-06T11:02:02.496Z","modified":"2026-09-08T08:48:16.651822417Z","updated_at":"2026-11-02T15:28:34.343258Z"},{"id":"CLSA-2025-1758636652","title":"openldap: Fix of 14 CVEs","description":"- Rebase to 2.4.58 to fix the following vulnerabilities:\n- CVE-2020-12243: fix denial of service caused by LDAP search filters with nested\n  boolean expressions\n- CVE-2020-36221: fix integer underflow in the Certificate Exact Assertion processing\n- CVE-2020-36223: fix slapd crash in the Values Return Filter control handling\n- CVE-2020-36226: fix slapd crash in the saslAuthzTo processing\n- CVE-2020-36228: fix slapd crash in the Certificate List Exact Assertion processing\n- CVE-2020-36225: fix double free and slapd crash in the saslAuthzTo processing\n- CVE-2020-36227: fix infinite loop in slapd with the cancel_extop Cancel operation\n- CVE-2020-36230: fix assertion failure in slapd in the X.509 DN parsing in decode.c\n- CVE-2020-25692: fix NULL pointer dereference during a request for renaming RDNs\n- CVE-2020-25709: fix assertion failure caused by processing malicious packet\n- CVE-2020-36224: fix invalid pointer free and slapd crash in the saslAuthzTo\n  processing\n- CVE-2020-36229: fix slapd crash in the X.509 DN parsing in ad_keystring\n- CVE-2020-25710: fix failed assertion in csnNormalize23()\n- CVE-2020-36222: fix assertion failure in slapd in the saslAuthzTo validation","status":"published","published":"2026-04-22T09:20:05Z","modified":"2026-10-21T10:48:17.543026662Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1758645818","title":"openldap: Fix of 14 CVEs","description":"- Rebase to 2.4.58 to fix the following vulnerabilities:\n- CVE-2020-12243: fix denial of service caused by LDAP search filters with nested\n  boolean expressions\n- CVE-2020-36221: fix integer underflow in the Certificate Exact Assertion processing\n- CVE-2020-36223: fix slapd crash in the Values Return Filter control handling\n- CVE-2020-36226: fix slapd crash in the saslAuthzTo processing\n- CVE-2020-36228: fix slapd crash in the Certificate List Exact Assertion processing\n- CVE-2020-36225: fix double free and slapd crash in the saslAuthzTo processing\n- CVE-2020-36227: fix infinite loop in slapd with the cancel_extop Cancel operation\n- CVE-2020-36230: fix assertion failure in slapd in the X.509 DN parsing in decode.c\n- CVE-2020-25692: fix NULL pointer dereference during a request for renaming RDNs\n- CVE-2020-25709: fix assertion failure caused by processing malicious packet\n- CVE-2020-36224: fix invalid pointer free and slapd crash in the saslAuthzTo\n  processing\n- CVE-2020-36229: fix slapd crash in the X.509 DN parsing in ad_keystring\n- CVE-2020-25710: fix failed assertion in csnNormalize23()\n- CVE-2020-36222: fix assertion failure in slapd in the saslAuthzTo validation","status":"published","published":"2026-04-23T20:31:57Z","modified":"2026-10-21T10:47:48.199517577Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2026-1777310722","title":"openldap: Fix of 15 CVEs","description":"- CVE-2019-13565: SASL session encryption SSF not reset on new connection, allowing downgrade\n- CVE-2020-12243: slapd crash via deeply nested LDAP search filter boolean expressions\n- CVE-2020-25692: NULL pointer dereference in slapd during modRDN request\n- CVE-2020-25709: slapd assertion failure via crafted certificate list validation\n- CVE-2020-25710: slapd assertion failure in obsolete csnNormalize23\n- CVE-2020-36221: slapd integer underflow crash in Certificate Exact Assertion processing\n- CVE-2020-36222: slapd assertion failure in saslAuthzTo validation\n- CVE-2020-36223: slapd double free crash in Values Return Filter control handling\n- CVE-2020-36224: slapd invalid pointer free and crash in saslAuthzTo processing\n- CVE-2020-36225: slapd double free crash in saslAuthzTo processing\n- CVE-2020-36226: slapd memch-\u003ebv_len miscalculation and crash in saslAuthzTo processing\n- CVE-2020-36227: slapd infinite loop via cancel_extop Cancel operation\n- CVE-2020-36228: slapd integer underflow crash in Certificate List Exact Assertion processing\n- CVE-2020-36229: slapd crash in X.509 DN parsing ad_keystring via ldap_X509dn2bv\n- CVE-2020-36230: slapd assertion failure in X.509 DN parsing ber_next_element in decode.c","status":"published","published":"2026-04-27T17:25:27Z","modified":"2026-06-01T00:33:23.608317789Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1777393215","title":"openldap: Fix of 15 CVEs","description":"- CVE-2019-13565: SASL session encryption SSF not reset on new connection, allowing downgrade\n- CVE-2020-12243: slapd crash via deeply nested LDAP search filter boolean expressions\n- CVE-2020-25692: NULL pointer dereference in slapd during modRDN request\n- CVE-2020-25709: slapd assertion failure via crafted certificate list validation\n- CVE-2020-25710: slapd assertion failure in obsolete csnNormalize23\n- CVE-2020-36221: slapd integer underflow crash in Certificate Exact Assertion processing\n- CVE-2020-36222: slapd assertion failure in saslAuthzTo validation\n- CVE-2020-36223: slapd double free crash in Values Return Filter control handling\n- CVE-2020-36224: slapd invalid pointer free and crash in saslAuthzTo processing\n- CVE-2020-36225: slapd double free crash in saslAuthzTo processing\n- CVE-2020-36226: slapd memch-\u003ebv_len miscalculation and crash in saslAuthzTo processing\n- CVE-2020-36227: slapd infinite loop via cancel_extop Cancel operation\n- CVE-2020-36228: slapd integer underflow crash in Certificate List Exact Assertion processing\n- CVE-2020-36229: slapd crash in X.509 DN parsing ad_keystring via ldap_X509dn2bv\n- CVE-2020-36230: slapd assertion failure in X.509 DN parsing ber_next_element in decode.c","status":"published","published":"2026-04-28T16:20:21Z","modified":"2026-06-01T00:33:12.568365854Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"DLA-2481-1","title":"openldap - security update","status":"published","published":"2020-12-04T00:00:00Z","modified":"2026-03-09T01:17:58.167234Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-4792-1","title":"openldap - security update","status":"published","published":"2020-11-17T00:00:00Z","modified":"2026-03-09T02:10:44.602331Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2021-0046","title":"Updated openldap packages fix security vulnerabilities","description":"It was discovered that OpenLDAP incorrectly handled certain malformed inputs.\nA remote attacker could possibly use this issue to cause OpenLDAP to crash,\nresulting in a denial of service (CVE-2020-25709, CVE-2020-25710).\n","status":"published","published":"2021-01-19T15:40:16Z","modified":"2026-04-16T04:40:47.113235671Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2021:0102-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909).\n- CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909).\n\nNon-security issue fixed:\n\n- Retry binds in the LDAP backend when the remote LDAP server disconnected the (idle) LDAP connection. (bsc#1179503)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-01-17T17:23:38Z","modified":"2026-02-04T03:20:23.717825Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2021:0107-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909).\n- CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909).\n\nNon-security issue fixed:\n\n- Retry binds in the LDAP backend when the remote LDAP server disconnected the (idle) LDAP connection. (bsc#1179503)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-01-18T09:22:40Z","modified":"2026-02-04T02:15:25.630895Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"SUSE-SU-2021:0128-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\n- CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909).\n- CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909).\n","status":"published","published":"2021-01-14T10:01:29Z","modified":"2026-02-04T03:59:21.810197Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0129-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909).\n- CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909).\n\nNon-security issue fixed:\n\n- Retry binds in the LDAP backend when the remote LDAP server disconnected the (idle) LDAP connection. (bsc#1179503)\n","status":"published","published":"2021-01-14T11:26:28Z","modified":"2025-05-02T04:30:40.365579Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0142-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\n- CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909).\n- CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909).\n","status":"published","published":"2021-01-15T12:02:13Z","modified":"2026-02-04T03:11:45.772071Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:14597-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\n- CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909).\n- CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909).\n","status":"published","published":"2021-01-14T12:43:57Z","modified":"2026-02-04T02:58:05.827314Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"USN-4634-1","title":"openldap vulnerabilities","description":"It was discovered that OpenLDAP incorrectly handled certain malformed\ninputs. A remote attacker could possibly use this issue to cause OpenLDAP\nto crash, resulting in a denial of service.\n","status":"published","published":"2020-11-17T13:10:04Z","modified":"2026-04-22T10:09:45.249089Z","updated_at":"2026-11-02T16:58:15.159055Z"},{"id":"USN-4634-2","title":"openldap vulnerabilities","description":"USN-4634-1 fixed several vulnerabilities in OpenLDAP. This update provides\nthe corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that OpenLDAP incorrectly handled certain malformed\n inputs. A remote attacker could possibly use this issue to cause OpenLDAP\n to crash, resulting in a denial of service.\n","status":"published","published":"2020-11-23T12:04:32Z","modified":"2026-04-22T10:08:53.385418Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}