Published: 08/12/2020 Updated: 12/10/2022

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

A NULL pointer dereference flaw was found in the OpenLDAP server, during a request for renaming RDNs. This flaw allows a remote, unauthenticated malicious user to crash the slapd process by sending a specially crafted request, causing a denial of service. The highest threat from this vulnerability is to system availability. (CVE-2020-25692)

Vulnerable Product	Search on Vulmon	Subscribe to Product
openldap openldap
redhat enterprise linux 7.0
redhat enterprise linux 6.0
redhat enterprise linux 5.0
netapp cloud backup -
netapp solidfire_baseboard_management_controller_firmware -

A vulnerability in the handling of normalization with modrdn was discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol An unauthenticated remote attacker can use this flaw to cause a denial of service (slapd daemon crash) via a specially crafted packet For the stable distribution (buster), this problem has bee ...

A NULL pointer dereference flaw was found in the OpenLDAP server, during a request for renaming RDNs This flaw allows a remote, unauthenticated attacker to crash the slapd process by sending a specially crafted request, causing a denial of service The highest threat from this vulnerability is to system availability (CVE-2020-25692) ...

Critical Infrastructure Sectors: Energy

Critical Infrastructure Sectors: Critical Manufacturing

CWE-476 https://bugzilla.redhat.com/show_bug.cgi?id=1894567 https://security.netapp.com/advisory/ntap-20210108-0006/https://nvd.nist.gov https://www.debian.org/security/2020/dsa-4782 https://www.cisa.gov/uscert/ics/advisories/icsa-22-272-02 https://alas.aws.amazon.com/AL2/ALAS-2021-1638.html

CVE-2020-25692

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

ICS Advisories

References

Vulmon Search

About

Products

Connect