CVE-2020-36225

Katalog CVE

CVSS 7.5 · High EPSS 4,3%

Kerentanan Double Free pada openldap, debian linux +1 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service.

Rincian

Terbit di NVD

26 Januari 2021

Terakhir diubah

14 Oktober 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-415: Double Free

EPSS (30 hari)

4,3% peluang dieksploitasi; lebih tinggi dari 90,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugs.openldap.org/show_bug.cgi?id=9412 issue tracking · advisory vendor
• https://git.openldap.org/openldap/openldap/-/commit/554dff1927176579d652f2fe60c90e9abbad4c65 patch · advisory vendor
• https://git.openldap.org/openldap/openldap/-/commit/5a2017d4e61a6ddc4dcb4415028e0d08eb6bca26 patch · advisory vendor
• https://git.openldap.org/openldap/openldap/-/commit/c0b61a9486508e5202aa2e0cfb68c9813731b439 patch · advisory vendor
• https://git.openldap.org/openldap/openldap/-/commit/d169e7958a3e0dc70f59c8374bf8a59833b7bdd8 patch · advisory vendor
• https://git.openldap.org/openldap/openldap/-/tags/OPENLDAP_REL_ENG_2_4_57 release notes · advisory vendor
• http://seclists.org/fulldisclosure/2021/May/64 mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2021/May/65 mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2021/May/70 mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2021/02/msg00005.html mailing list · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20210226-0002/ advisory pihak ketiga
• https://support.apple.com/kb/HT212529 advisory pihak ketiga
• https://support.apple.com/kb/HT212530 advisory pihak ketiga
• https://support.apple.com/kb/HT212531 advisory pihak ketiga
• https://www.debian.org/security/2021/dsa-4845 advisory pihak ketiga
• https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.boo...
• https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.boo...
• https://cert-portal.siemens.com/productcert/html/ssa-398330.html