CVE-2020-36225

CVE-2020-36225 : OpenLDAP before 2.4.57 contains a flaw in the saslAuthzTo processing that allows a double free and slapd crash, causing denial of service. Multiple connected advisories confirm OpenLDAP vulnerability and reference a fix in later releases (2.4.58 in some updates). Affected product...

CVE-2020-36225

A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service...

CVE-2020-36225

A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service...

CVE-2020-36226

A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch-bvlen miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service...

CVE-2020-36226: Undefined Security Weakness

A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch-bvlen miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service...

PT-2021-5555

Name of the Vulnerable Software and Affected Versions OpenLDAP versions prior to 2.4.57 Description The issue is related to an insufficient use of the assert function in the open implementation of the OpenLDAP protocol. It may allow a remote attacker to execute a denial of service attack by sendi...

CVE-2020-36222: Reachable Assertion

A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service...

CVE-2020-36224: Release of Invalid Pointer or Reference

A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service...

PT-2021-5534

Name of the Vulnerable Software and Affected Versions OpenLDAP versions prior to 2.4.57 Description The issue is related to a double free vulnerability in the OpenLDAP protocol, which can be exploited by a remote attacker to cause a denial of service DoS by sending a specially crafted request to...

PT-2021-5549

Name of the Vulnerable Software and Affected Versions OpenLDAP versions prior to 2.4.57 Description The issue is related to an invalid pointer free or reference release in the OpenLDAP implementation. Exploitation of this issue can allow a remote attacker to cause a denial of service by sending a...

PT-2021-5533

Name of the Vulnerable Software and Affected Versions OpenLDAP versions prior to 2.4.57 Description A flaw in OpenLDAP leads to a memch-bv len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service. The issue is related to a resource management error. An...

CVE-2020-36225: Double Free

A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service...