CVE-2020-25709CWE-617

CVE-2020-25709

High · published May 18, 2021

CVSS v3.1
7.5
EPSS
3%
Percentile
88.9
In the wild
Unconfirmed
What it is

A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.03438 · 88.9th percentile
Weakness
CWE-617 · Reachable Assertion
Published
2021-05-18T16:15Z
Affected products (23)
ProductVersionsFixed in
openldap/openldap< 2.4.562.4.56
debian/debian_linuxall versions—
debian/debian_linuxall versions—
apple/mac_os_x≥ 10.14.0, < 10.14.610.14.6
apple/mac_os_x≥ 10.15, < 10.15.710.15.7
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/macos≥ 11.0, < 11.0.111.0.1
redhat/jboss_core_servicesall versions—
References (17)
http://seclists.org/fulldisclosure/2021/Feb/14 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=1899675 · [email protected]https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E · [email protected]https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E · [email protected]https://lists.debian.org/debian-lts-announce/2020/12/msg00008.html · [email protected]https://security.netapp.com/advisory/ntap-20210716-0003/ · [email protected]https://support.apple.com/kb/HT212147 · [email protected]https://www.debian.org/security/2020/dsa-4792 · [email protected]http://seclists.org/fulldisclosure/2021/Feb/14 · af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=1899675 · af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E · af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2020/12/msg00008.html · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20210716-0003/ · af854a3a-2127-422b-91ae-364da2661108https://support.apple.com/kb/HT212147 · af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2020/dsa-4792 · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-398330.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 18 MAY 11:51Z
    A flaw was found in OpenLDAP
    cvelistv5