CVE-2020-25709

A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.

References

Affected packages

Git / github.com/openldap/openldap

Affected ranges

Type

GIT

Repo

https://github.com/openldap/openldap

Events

Introduced

Fixed

ab3915154e69920d480205b4bf5ccb2b391a0a1f

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.4.56"
        }
    ]
}

Affected versions

Other

AUTOCONF_2_57

FreeBSD_3_3

LDAP_3_3+prerelease

LDBM_POST_GIANT_RWLOCK

LDBM_PRE_GIANT_RWLOCK

NO_SLAP_OP_BLOCKS

OPENDLAP_REL_ENG_2_2_MP

OPENLDAP_AC_BP

OPENLDAP_REL_ENG_1_0_0

OPENLDAP_REL_ENG_2_1_BP

OPENLDAP_REL_ENG_2_1_MP

OPENLDAP_REL_ENG_2_2_BP

OPENLDAP_REL_ENG_2_2_MP

OPENLDAP_REL_ENG_2_3_BP

OPENLDAP_REL_ENG_2_3_MP

OPENLDAP_REL_ENG_2_4_0ALPHA

OPENLDAP_REL_ENG_2_4_10

OPENLDAP_REL_ENG_2_4_11

OPENLDAP_REL_ENG_2_4_12

OPENLDAP_REL_ENG_2_4_13

OPENLDAP_REL_ENG_2_4_14

OPENLDAP_REL_ENG_2_4_15

OPENLDAP_REL_ENG_2_4_16

OPENLDAP_REL_ENG_2_4_17

OPENLDAP_REL_ENG_2_4_18

OPENLDAP_REL_ENG_2_4_19

OPENLDAP_REL_ENG_2_4_1ALPHA

OPENLDAP_REL_ENG_2_4_20

OPENLDAP_REL_ENG_2_4_21

OPENLDAP_REL_ENG_2_4_22

OPENLDAP_REL_ENG_2_4_23

OPENLDAP_REL_ENG_2_4_24

OPENLDAP_REL_ENG_2_4_25

OPENLDAP_REL_ENG_2_4_26

OPENLDAP_REL_ENG_2_4_27

OPENLDAP_REL_ENG_2_4_28

OPENLDAP_REL_ENG_2_4_29

OPENLDAP_REL_ENG_2_4_2ALPHA

OPENLDAP_REL_ENG_2_4_30

OPENLDAP_REL_ENG_2_4_32

OPENLDAP_REL_ENG_2_4_33

OPENLDAP_REL_ENG_2_4_34

OPENLDAP_REL_ENG_2_4_35

OPENLDAP_REL_ENG_2_4_36

OPENLDAP_REL_ENG_2_4_37

OPENLDAP_REL_ENG_2_4_38

OPENLDAP_REL_ENG_2_4_39

OPENLDAP_REL_ENG_2_4_3ALPHA

OPENLDAP_REL_ENG_2_4_40

OPENLDAP_REL_ENG_2_4_41

OPENLDAP_REL_ENG_2_4_42

OPENLDAP_REL_ENG_2_4_43

OPENLDAP_REL_ENG_2_4_44

OPENLDAP_REL_ENG_2_4_45

OPENLDAP_REL_ENG_2_4_46

OPENLDAP_REL_ENG_2_4_47

OPENLDAP_REL_ENG_2_4_48

OPENLDAP_REL_ENG_2_4_49

OPENLDAP_REL_ENG_2_4_4ALPHA

OPENLDAP_REL_ENG_2_4_50

OPENLDAP_REL_ENG_2_4_51

OPENLDAP_REL_ENG_2_4_52

OPENLDAP_REL_ENG_2_4_53

OPENLDAP_REL_ENG_2_4_54

OPENLDAP_REL_ENG_2_4_55

OPENLDAP_REL_ENG_2_4_5BETA

OPENLDAP_REL_ENG_2_4_6

OPENLDAP_REL_ENG_2_4_7

OPENLDAP_REL_ENG_2_4_8

OPENLDAP_REL_ENG_2_4_9

OPENLDAP_REL_ENG_2_4_BP

OPENLDAP_REL_ENG_2_4_MP

OPENLDAP_REL_ENG_2_BP

OPENLDAP_REL_ENG_2_MP

OPENLDAP_SLAPD_BACK_LDAP

UMICH_LDAP_3_3

LMDB_0.*

LMDB_0.9.15

LMDB_0.9.16

LMDB_0.9.17

LMDB_0.9.18

LMDB_0.9.19

LMDB_0.9.20

LMDB_0.9.21

LMDB_0.9.22

LMDB_0.9.23

LMDB_0.9.24

LMDB_0.9.25

LMDB_0.9.26

LMDB_0.9.27

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "10.14.0"
            },
            {
                "fixed": "10.14.6"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "10.15"
            },
            {
                "fixed": "10.15.7"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.14.6-NA"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.14.6-security_update_2019\\-004"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.14.6-security_update_2019\\-005"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.14.6-security_update_2019\\-006"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.14.6-security_update_2019\\-007"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.14.6-security_update_2020\\-001"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.14.6-security_update_2020\\-002"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.14.6-security_update_2020\\-003"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.14.6-security_update_2020\\-004"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.14.6-security_update_2020\\-005"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.14.6-security_update_2020\\-006"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.14.6-security_update_2020\\-007"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.15.7-NA"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.15.7-security_update_2020\\-005"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.15.7-security_update_2020\\-007"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.15.7-supplemental_update"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "11.0"
            },
            {
                "fixed": "11.0.1"
            }
        ]
    }
]

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-25709.json"