Published: 28/04/2020 Updated: 29/04/2022

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

In filter.c in slapd in OpenLDAP prior to 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).

Vulnerable Product	Search on Vulmon	Subscribe to Product
openldap openldap
debian debian linux 8.0
debian debian linux 9.0
debian debian linux 10.0
opensuse leap 15.1
canonical ubuntu linux 18.04
canonical ubuntu linux 14.04
canonical ubuntu linux 19.10
canonical ubuntu linux 20.04
canonical ubuntu linux 16.04
canonical ubuntu linux 12.04
netapp cloud backup -
netapp steelstore cloud integrated storage -
netapp h410c_firmware -
netapp h300s_firmware -
netapp h500s_firmware -
netapp h700s_firmware -
netapp h300e_firmware -
netapp h500e_firmware -
netapp h700e_firmware -
netapp h410s_firmware -
broadcom brocade fabric operating system -
apple mac os x
apple mac os x 10.14.6
apple mac os x 10.13.6
oracle solaris 11
oracle solaris 10
oracle zfs storage appliance kit 8.8

OpenLDAP could be made to crash if it received specially crafted network traffic ...

A vulnerability was discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol LDAP search filters with nested boolean expressions can result in denial of service (slapd daemon crash) For the oldstable distribution (stretch), this problem has been fixed in version 2444+dfsg-5+deb9u4 For the stable distribution ( ...

Synopsis Moderate: openldap security update Type/Severity Security Advisory: Moderate Topic An update for openldap is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, ...

Synopsis Low: OpenShift Container Platform 4340 security and bug fix update Type/Severity Security Advisory: Low Topic An update is now available for Red Hat OpenShift Container Platform 43Red Hat Product Security has rated this update as having a security impact of Low A Common Vulnerability Scoring S ...

Synopsis Moderate: security update - Red Hat Ansible Tower 36 runner release (CVE-2019-18874) Type/Severity Security Advisory: Moderate Topic Red Hat Ansible Tower 36 runner release (CVE-2019-18874) Description Updated python-psutil version to 566 inside ansible-runner container(CVE-20 ...

Synopsis Moderate: security update - Red Hat Ansible Tower 37 runner release (CVE-2019-18874) Type/Severity Security Advisory: Moderate Topic Red Hat Ansible Tower 37 runner release (CVE-2019-18874) Description Updated python-psutil version to 566 inside ansible-runner container (CVE-2 ...

In filterc in slapd in OpenLDAP before 2450, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash) (CVE-2020-12243) ...

Menu Log in ...

Critical Infrastructure Sectors: Critical Manufacturing

Critical Infrastructure Sectors: Energy

CWE-674 https://git.openldap.org/openldap/openldap/-/blob/OPENLDAP_REL_ENG_2_4/CHANGES https://bugs.openldap.org/show_bug.cgi?id=9202 https://git.openldap.org/openldap/openldap/-/commit/98464c11df8247d6a11b52e294ba5dd4f0380440 https://www.debian.org/security/2020/dsa-4666 https://lists.debian.org/debian-lts-announce/2020/05/msg00001.html https://usn.ubuntu.com/4352-2/https://security.netapp.com/advisory/ntap-20200511-0003/http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00016.html https://usn.ubuntu.com/4352-1/https://support.apple.com/kb/HT211289 https://www.oracle.com/security-alerts/cpuoct2020.html https://www.oracle.com/security-alerts/cpuapr2022.html https://nvd.nist.gov https://usn.ubuntu.com/4352-2/https://www.cisa.gov/uscert/ics/advisories/icsa-22-116-01 https://www.cisa.gov/news-events/ics-advisories/icsa-23-348-10

CVE-2020-12243

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

ICS Advisories

References

Vulmon Search

About

Products

Connect