CVE-2020-25709

A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAPs slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 93%
VendorProductVersion
openldapopenldap
𝑥
< 2.4.56
debiandebian_linux
9.0
debiandebian_linux
10.0
applemac_os_x
10.14.0 ≤
𝑥
< 10.14.6
applemac_os_x
10.15 ≤
𝑥
< 10.15.7
applemac_os_x
10.14.6
applemac_os_x
10.14.6:security_update_2019-004
applemac_os_x
10.14.6:security_update_2019-005
applemac_os_x
10.14.6:security_update_2019-006
applemac_os_x
10.14.6:security_update_2019-007
applemac_os_x
10.14.6:security_update_2020-001
applemac_os_x
10.14.6:security_update_2020-002
applemac_os_x
10.14.6:security_update_2020-003
applemac_os_x
10.14.6:security_update_2020-004
applemac_os_x
10.14.6:security_update_2020-005
applemac_os_x
10.14.6:security_update_2020-006
applemac_os_x
10.14.6:security_update_2020-007
applemac_os_x
10.15.7
applemac_os_x
10.15.7:security_update_2020-005
applemac_os_x
10.15.7:security_update_2020-007
applemac_os_x
10.15.7:supplemental_update
applemacos
11.0 ≤
𝑥
< 11.0.1
redhatjboss_core_services
-
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
openldap
bullseye (security)
2.4.57+dfsg-3+deb11u1
fixed
bullseye
2.4.57+dfsg-3+deb11u1
fixed
bookworm
2.5.13+dfsg-5
fixed
sid
2.5.18+dfsg-3
fixed
trixie
2.5.18+dfsg-3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
openldap
groovy
Fixed 2.4.53+dfsg-1ubuntu1.2
released
focal
Fixed 2.4.49+dfsg-2ubuntu1.5
released
bionic
Fixed 2.4.45+dfsg-1ubuntu1.8
released
xenial
Fixed 2.4.42+dfsg-2ubuntu3.11
released
trusty
Fixed 2.4.31-1+nmu2ubuntu8.5+esm4
released