ISOMAN

CVE

CVE-2020-12243

In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).

Severity
HIGH
CVSS
7.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu20.04.6 amd64 desktopunknownsource
Ubuntu20.04.6 amd64 live-serverunknownsource
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource

References

  1. http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00016.html
  2. https://bugs.openldap.org/show_bug.cgi?id=9202
  3. https://git.openldap.org/openldap/openldap/-/blob/OPENLDAP_REL_ENG_2_4/CHANGES
  4. https://git.openldap.org/openldap/openldap/-/commit/98464c11df8247d6a11b52e294ba5dd4f0380440
  5. https://lists.debian.org/debian-lts-announce/2020/05/msg00001.html
  6. https://security.netapp.com/advisory/ntap-20200511-0003/
  7. https://support.apple.com/kb/HT211289
  8. https://usn.ubuntu.com/4352-1/
  9. https://usn.ubuntu.com/4352-2/
  10. https://www.debian.org/security/2020/dsa-4666
  11. https://www.oracle.com/security-alerts/cpuapr2022.html
  12. https://www.oracle.com/security-alerts/cpuoct2020.html
  13. http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00016.html
  14. https://bugs.openldap.org/show_bug.cgi?id=9202
  15. https://git.openldap.org/openldap/openldap/-/blob/OPENLDAP_REL_ENG_2_4/CHANGES
  16. https://git.openldap.org/openldap/openldap/-/commit/98464c11df8247d6a11b52e294ba5dd4f0380440
  17. https://lists.debian.org/debian-lts-announce/2020/05/msg00001.html
  18. https://security.netapp.com/advisory/ntap-20200511-0003/
  19. https://support.apple.com/kb/HT211289
  20. https://usn.ubuntu.com/4352-1/