CVE-2020-25710

HIGH · 7.5 CVSS Gepubliceerd: 28-05-2021 CWE-617

Beschrijving

A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.

Vendors

Openldap Redhat Debian Fedoraproject

Affected products

Openldap Jboss Core Services Jboss Enterprise Application Platform Jboss Enterprise Web Server Enterprise Linux Debian Linux Fedora

References

bugzilla.redhat.com
git.openldap.org
lists.apache.org
lists.apache.org
lists.debian.org
security.netapp.com
www.debian.org
cert-portal.siemens.com