CVE-2020-25709

Name
CVE-2020-25709
Description
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.
NVD Severity
medium
Other trackers
Mailing lists
Exploits
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
MLIST https://lists.debian.org/debian-lts-announce/2020/12/msg00008.html
DEBIAN https://www.debian.org/security/2020/dsa-4792
MISC https://bugzilla.redhat.com/show_bug.cgi?id=1899675
FULLDISC http://seclists.org/fulldisclosure/2021/Feb/14
CONFIRM https://support.apple.com/kb/HT212147
Mailing List https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E
Mailing List https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E
Third Party Advisory https://security.netapp.com/advisory/ntap-20210716-0003/

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:* openldap >= None < 2.4.56

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
openldap 3.11-main 2.4.48-r3 Natanael Copa <ncopa@alpinelinux.org> fixed
openldap 3.10-main 2.4.48-r2 Natanael Copa <ncopa@alpinelinux.org> fixed