CVE-2020-36224

A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 67%
VendorProductVersion
openldapopenldap
𝑥
< 2.4.57
debiandebian_linux
9.0
debiandebian_linux
10.0
applemac_os_x
10.14.0 ≤
𝑥
< 10.14.6
applemac_os_x
10.14.6
applemac_os_x
10.14.6:security_update_2019-004
applemac_os_x
10.14.6:security_update_2019-005
applemac_os_x
10.14.6:security_update_2019-006
applemac_os_x
10.14.6:security_update_2019-007
applemac_os_x
10.14.6:security_update_2020-001
applemac_os_x
10.14.6:security_update_2020-002
applemac_os_x
10.14.6:security_update_2020-003
applemac_os_x
10.14.6:security_update_2020-004
applemac_os_x
10.14.6:security_update_2020-005
applemac_os_x
10.14.6:security_update_2020-006
applemac_os_x
10.14.6:security_update_2020-007
applemac_os_x
10.14.6:security_update_2021-001
applemac_os_x
10.14.6:security_update_2021-002
applemac_os_x
10.14.6:security_update_2021-003
applemac_os_x
10.14.6:supplemental_update
applemac_os_x
10.14.6:supplemental_update_2
applemacos
11.1 ≤
𝑥
< 11.4
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
openldap
bullseye (security)
2.4.57+dfsg-3+deb11u1
fixed
bullseye
2.4.57+dfsg-3+deb11u1
fixed
bookworm
2.5.13+dfsg-5
fixed
sid
2.5.18+dfsg-3
fixed
trixie
2.5.18+dfsg-3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
openldap
noble
Fixed 2.4.57+dfsg-2ubuntu1
released
mantic
Fixed 2.4.57+dfsg-2ubuntu1
released
lunar
Fixed 2.4.57+dfsg-2ubuntu1
released
kinetic
Fixed 2.4.57+dfsg-2ubuntu1
released
jammy
Fixed 2.4.57+dfsg-2ubuntu1
released
impish
Fixed 2.4.57+dfsg-2ubuntu1
released
hirsute
Fixed 2.4.57+dfsg-2ubuntu1
released
groovy
Fixed 2.4.53+dfsg-1ubuntu1.3
released
focal
Fixed 2.4.49+dfsg-2ubuntu1.6
released
bionic
Fixed 2.4.45+dfsg-1ubuntu1.9
released
xenial
Fixed 2.4.42+dfsg-2ubuntu3.12
released
trusty
needed
References