Vulnerability CVE-2020-36229: Information

Description

A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in ad_keystring, resulting in denial of service.

Severity: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2020-36229
Published: Jan. 26, 2021
Modified: Nov. 7, 2023
Error type identifier: CWE-843

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
openldapsisyphus2.4.57-alt12.6.7-alt2ALT-PU-2021-1333-1266287Fixed
openldapp102.4.57-alt12.4.59-alt1.p10.2ALT-PU-2021-1333-1266287Fixed
openldapp92.4.57-alt0.M90P.12.4.59-alt0.p9.1ALT-PU-2021-1352-1266288Fixed
openldapc10f12.4.57-alt12.4.59-alt1.p10.2ALT-PU-2021-1333-1266287Fixed
openldapc9f22.4.57-alt0.M90P.12.4.59-alt0.c9.2ALT-PU-2021-1354-1266289Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
    [bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
      https://support.apple.com/kb/HT212531
      • Third Party Advisory
      https://support.apple.com/kb/HT212530
      • Third Party Advisory
      20210526 APPLE-SA-2021-05-25-3 Security Update 2021-004 Mojave
      • Mailing List
      • Third Party Advisory
      20210526 APPLE-SA-2021-05-25-4 Security Update 2021-003 Catalina
      • Mailing List
      • Third Party Advisory
      20210526 APPLE-SA-2021-05-25-2 macOS Big Sur 11.4
      • Mailing List
      • Third Party Advisory
      https://support.apple.com/kb/HT212529
      • Third Party Advisory
      https://security.netapp.com/advisory/ntap-20210226-0002/
      • Third Party Advisory
      DSA-4845
      • Third Party Advisory
      [debian-lts-announce] 20210203 [SECURITY] [DLA 2544-1] openldap security update
      • Mailing List
      • Third Party Advisory
      https://git.openldap.org/openldap/openldap/-/commit/4bdfffd2889c0c5cdf58bebafbdc8fce4bb2bff0
      • Patch
      • Vendor Advisory
      https://git.openldap.org/openldap/openldap/-/tags/OPENLDAP_REL_ENG_2_4_57
      • Release Notes
      • Vendor Advisory
      https://bugs.openldap.org/show_bug.cgi?id=9425
      • Issue Tracking
      • Vendor Advisory

        1. Configuration 1

          cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:*
          End excliding
          2.4.57

          Configuration 2

          cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
          cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

          Configuration 3

          cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
          Start including
          10.14.0
          End excliding
          10.14.6
          cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*
          cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*
          cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*
          cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*
          cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*
          cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*
          cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*
          cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*
          cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*
          cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*
          cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*
          cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*
          cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*
          cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*
          cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-001:*:*:*:*:*:*
          cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-002:*:*:*:*:*:*
          cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-003:*:*:*:*:*:*
          cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
          Start including
          11.1
          End excliding
          11.4
      VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
      Version: v24.5.0
      Back to top