CVE-2020-36226

Name
CVE-2020-36226
Description
A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.
NVD Severity
medium
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Patch https://git.openldap.org/openldap/openldap/-/commit/5a2017d4e61a6ddc4dcb4415028e0d08eb6bca26
Patch https://git.openldap.org/openldap/openldap/-/commit/c0b61a9486508e5202aa2e0cfb68c9813731b439
Patch https://git.openldap.org/openldap/openldap/-/commit/554dff1927176579d652f2fe60c90e9abbad4c65
Patch https://git.openldap.org/openldap/openldap/-/commit/d169e7958a3e0dc70f59c8374bf8a59833b7bdd8
Release Notes https://git.openldap.org/openldap/openldap/-/tags/OPENLDAP_REL_ENG_2_4_57
Issue Tracking https://bugs.openldap.org/show_bug.cgi?id=9413
Mailing List https://lists.debian.org/debian-lts-announce/2021/02/msg00005.html
Third Party Advisory https://www.debian.org/security/2021/dsa-4845
Third Party Advisory https://security.netapp.com/advisory/ntap-20210226-0002/
Third Party Advisory https://support.apple.com/kb/HT212529
Third Party Advisory https://support.apple.com/kb/HT212531
FULLDISC http://seclists.org/fulldisclosure/2021/May/70
FULLDISC http://seclists.org/fulldisclosure/2021/May/64
FULLDISC http://seclists.org/fulldisclosure/2021/May/65
CONFIRM https://support.apple.com/kb/HT212530
MLIST https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c@%3Cissues.guacamole.apache.org%3E
MLIST https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E
MLIST https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:* openldap >= None < 2.4.57

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
openldap 3.11-main 2.4.48-r3 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openldap 3.10-main 2.4.48-r2 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable