CVE-2020-25709

תיאור (מקור, אנגלית)

A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.

מדדים

CVSS 3.1

7.5 (HIGH) מקור הציון: NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS — סבירות ניצול

3% (אחוזון 100) נכון ל-18/10/2026

CWE

CWE-617

מוצרים מושפעים

openldap: openldap; debian: debian linux; apple: mac os x; apple: macos; redhat: jboss core services

קישורים

• https://bugzilla.redhat.com/show_bug.cgi?id=1899675 Issue TrackingPatchThird Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1899675 Issue TrackingPatchThird Party Advisory
• http://seclists.org/fulldisclosure/2021/Feb/14 Mailing ListThird Party Advisory
• https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600‮…
• https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61c‮…
• https://lists.debian.org/debian-lts-announce/2020/12/msg00008.html Mailing ListThird Party Advisory
• https://security.netapp.com/advisory/ntap-20210716-0003/ Third Party Advisory
• https://support.apple.com/kb/HT212147 Third Party Advisory
• https://www.debian.org/security/2020/dsa-4792 Third Party Advisory
• http://seclists.org/fulldisclosure/2021/Feb/14 Mailing ListThird Party Advisory