High · published January 26, 2021
CVSS calls it high at 7.5. It sits in the 99.7th percentile for exploit probability.
An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).
| Product | Versions | Fixed in |
|---|---|---|
| openldap/openldap | < 2.4.57 | 2.4.57 |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| apple/mac_os_x | ≥ 10.14.0, < 10.14.6 | 10.14.6 |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/macos | ≥ 11.1, < 11.4 | 11.4 |