OpenLDAP integer underflow vulnerability (CNVD-2021-06636)

OpenLDAP is a free, open source implementation of the Lightweight Directory Access Protocol LDAP. An integer underflow vulnerability exists in OpenLDAP versions prior to 2.4.57. An attacker could exploit this vulnerability to cause a slapd crash in Certificate Exact Assertion processing...

OpenLDAP 数字错误漏洞

OpenLDAP is a free, open source implementation of the Lightweight Directory Access Protocol LDAP. An integer underflow vulnerability exists in OpenLDAP versions prior to 2.4.57. An attacker could exploit this vulnerability to cause a slapd crash in Certificate List Exact Assertion processing...

OpenLDAP 安全漏洞

OpenLDAP is a free, open source implementation of the Lightweight Directory Access Protocol LDAP. A denial of service vulnerability exists in ldapX509dn2bv in OpenLDAP versions prior to 2.4.57. An attacker can exploit this vulnerability to cause a slapd crash in the X.509 DN resolution of...

CVE-2020-36221

CVE-2020-36221 is an integer underflow in OpenLDAP’s Certificate Exact Assertion processing that crashes slapd, causing denial of service. The issue affects OpenLDAP before 2.4.57; Astra Linux and ALAS advisories explicitly reference the underflow and the need to upgrade to 2.4.57 or newer to fix...

CVE-2020-36221

An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service schemainit.c serialNumberAndIssuerCheck...

CVE-2020-36221

An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service schemainit.c serialNumberAndIssuerCheck...

CVE-2020-36221

An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service schemainit.c serialNumberAndIssuerCheck...

CVE-2020-36222

CVE-2020-36222 affects OpenLDAP and is caused by an assertion failure in slapd during saslAuthzTo validation, leading to a denial of service. The connected documents confirm OpenLDAP versions before 2.4.57 are vulnerable, with the issue fixed in 2.4.57 (OPENLDAP_REL_ENG_2_4_57). Impact is a denia...

CVE-2020-36222

A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service...

CVE-2020-36222

A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service...

CVE-2020-36222

A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service...

CVE-2020-36224

CVE-2020-36224 is an OpenLDAP vulnerability present in OpenLDAP releases before 2.4.57. It can cause a denial of service due to an invalid pointer free in the saslAuthzTo processing, crashing slapd. A fix is available in OpenLDAP 2.4.57 and later; upgrade to a version at or beyond that release (v...

CVE-2020-36224

A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service...

CVE-2020-36224

A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service...

CVE-2020-36224

A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service...

CVE-2020-36225

CVE-2020-36225 : OpenLDAP before 2.4.57 contains a flaw in the saslAuthzTo processing that allows a double free and slapd crash, causing denial of service. Multiple connected advisories confirm OpenLDAP vulnerability and reference a fix in later releases (2.4.58 in some updates). Affected product...

CVE-2020-36225

A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service...

CVE-2020-36225

A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service...

CVE-2020-36225

A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service...

CVE-2020-36226

CVE-2020-36226 affects OpenLDAP prior to 2.4.57, where a memch->bv_len miscalculation in the saslAuthzTo processing can crash slapd, causing denial of service. Connected advisories (Astra Linux, ALAS summaries) corroborate OpenLDAP crashes/denial of service under OpenLDAP 2.x before 2.4.57 dur...