Show filters
65 Total Results
Displaying 11-20 of 65
Sort by:
Attacker Value
Unknown

CVE-2020-36230

Disclosure Date: January 26, 2021 (last updated November 08, 2023)
A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service.
Attacker Value
Unknown

CVE-2020-36229

Disclosure Date: January 26, 2021 (last updated November 08, 2023)
A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in ad_keystring, resulting in denial of service.
Attacker Value
Unknown

CVE-2020-36223

Disclosure Date: January 26, 2021 (last updated November 08, 2023)
A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).
Attacker Value
Unknown

CVE-2020-36222

Disclosure Date: January 26, 2021 (last updated November 08, 2023)
A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.
Attacker Value
Unknown

CVE-2020-36227

Disclosure Date: January 26, 2021 (last updated November 08, 2023)
A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.
Attacker Value
Unknown

CVE-2020-36228

Disclosure Date: January 26, 2021 (last updated November 08, 2023)
An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service.
Attacker Value
Unknown

CVE-2020-36221

Disclosure Date: January 26, 2021 (last updated November 08, 2023)
An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).
Attacker Value
Unknown

CVE-2020-36225

Disclosure Date: January 26, 2021 (last updated November 08, 2023)
A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
Attacker Value
Unknown

CVE-2020-25692

Disclosure Date: December 08, 2020 (last updated November 28, 2024)
A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.
Attacker Value
Unknown

CVE-2020-8027

Disclosure Date: September 22, 2020 (last updated November 28, 2024)
A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to overwrite arbitrary files and gain access to the openldap2 configuration This issue affects: SUSE Linux Enterprise Server 15-LTSS openldap2 versions prior to 2.4.46-9.37.1. SUSE Linux Enterprise Server for SAP 15 openldap2 versions prior to 2.4.46-9.37.1. openSUSE Leap 15.1 openldap2 versions prior to 2.4.46-lp151.10.18.1. openSUSE Leap 15.2 openldap2 versions prior to 2.4.46-lp152.14.9.1.