Medium WID-SEC-2023-1127 10 CVEs

OpenLDAP: Mehrere Schwachstellen ermöglichen Denial of Service

Published Jan 26, 2021 · Updated Aug 24, 2025 · Revision 13 · de-DE

Vendor: amazon Vendor: Debian Vendor: Hitachi Energy Vendor: Splunk Vendor: SUSE Vendor: Ubuntu Product: Enterprise Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: RTU500 Platform: Linux Platform: macOS Platform: Windows

Summary

Ein unbekannter Angreifer kann mehrere Schwachstellen in OpenLDAP ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

OpenLDAP ist eine frei verfügbare Implementierung des Verzeichnisdienstes LDAP.

Vulnerabilities 10

Unscored —

CVE-2020-36221 EPSS 85%

An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Asserti…

openldap openldap openldap Debian Ubuntu Alpine

Jan 25, 2021
Unscored —

CVE-2020-36222 EPSS 77%

A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation,…

openldap openldap openldap Debian Ubuntu Alpine

Jan 25, 2021
Unscored —

CVE-2020-36223

A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, …

openldap openldap openldap Debian Ubuntu Alpine

Jan 25, 2021
Unscored —

CVE-2020-36224

A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo p…

openldap openldap openldap Debian Ubuntu Alpine

Jan 25, 2021
Unscored —

CVE-2020-36225

A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing,…

openldap openldap openldap Debian Ubuntu Alpine

Jan 25, 2021
Unscored —

CVE-2020-36226

A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAu…

openldap openldap openldap Debian Ubuntu Alpine

Jan 25, 2021
Unscored —

CVE-2020-36227 EPSS 77%

A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel opera…

openldap openldap openldap Debian Ubuntu Alpine

Jan 25, 2021
Unscored —

CVE-2020-36228 EPSS 85%

An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact As…

openldap openldap openldap Debian Ubuntu Alpine

Jan 25, 2021
Unscored —

CVE-2020-36229

A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in a…

openldap openldap openldap Debian Ubuntu Alpine

Jan 25, 2021
Unscored —

CVE-2020-36230 EPSS 12%

A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in dec…

openldap openldap openldap Debian Ubuntu Alpine

Jan 25, 2021

Revision history

2025-08-24 #13
Neue Updates von Ubuntu aufgenommen
2025-08-18 #12
Neue Updates von Ubuntu aufgenommen
2024-10-14 #11
Neue Updates von Splunk-SVD aufgenommen
2023-05-07 #10
Doppelte Eintragung korrigiert
2023-05-04 #9
Neue Updates von Amazon aufgenommen
2023-05-02 #8
Neue Updates von Amazon aufgenommen
2021-12-07 #7
Neue Updates aufgenommen
2021-09-15 #6
Neue Updates von Amazon aufgenommen
2021-04-18 #5
Neue Updates von SUSE aufgenommen
2021-03-03 #4
Neue Updates von SUSE aufgenommen
2021-02-08 #3
Neue Updates von Ubuntu aufgenommen
2021-02-03 #2
Neue Updates von Debian aufgenommen
2021-01-26 #1
Initiale Fassung

References

NIST Database vom 2021-01-26
https://nvd.nist.gov/vuln/detail/CVE-2020-36221
NIST Database vom 2021-01-26
https://nvd.nist.gov/vuln/detail/CVE-2020-36222
NIST Database vom 2021-01-26
https://nvd.nist.gov/vuln/detail/CVE-2020-36223
NIST Database vom 2021-01-26
https://nvd.nist.gov/vuln/detail/CVE-2020-36224
NIST Database vom 2021-01-26
https://nvd.nist.gov/vuln/detail/CVE-2020-36225
NIST Database vom 2021-01-26
https://nvd.nist.gov/vuln/detail/CVE-2020-36226
NIST Database vom 2021-01-26
https://nvd.nist.gov/vuln/detail/CVE-2020-36227
NIST Database vom 2021-01-26
https://nvd.nist.gov/vuln/detail/CVE-2020-36228
NIST Database vom 2021-01-26
https://nvd.nist.gov/vuln/detail/CVE-2020-36229
NIST Database vom 2021-01-26
https://nvd.nist.gov/vuln/detail/CVE-2020-36230
Debian Security Advisory DSA-4845 vom 2021-02-03
https://www.debian.org/security/2021/dsa-4845
Debian Security Advisory DLA-2544 vom 2021-02-03
https://lists.debian.org/debian-lts-announce/2021/02/msg00005.html
Ubuntu Security Notice USN-4724-1 vom 2021-02-08
https://usn.ubuntu.com/4724-1
Ubuntu Security Notice USN-4724-1 vom 2021-02-08
https://ubuntu.com/security/notices/USN-4724-1
SUSE Security Update SUSE-SU-2021:0693-1 vom 2021-03-03
https://lists.suse.com/pipermail/sle-security-updates/2021-March/008428.html
SUSE Security Update SUSE-SU-2021:0692-1 vom 2021-03-03
https://lists.suse.com/pipermail/sle-security-updates/2021-March/008431.html
SUSE Security Update SUSE-SU-2021:14700-1 vom 2021-04-16
https://lists.suse.com/pipermail/sle-security-updates/2021-April/008644.html
Amazon Linux Security Advisory ALAS-2021-1707 vom 2021-09-15
https://alas.aws.amazon.com/AL2/ALAS-2021-1707.html
Hitachi Cybersecurity Advisory
https://search.abb.com/library/Download.aspx?DocumentID=8DBD000066&LanguageCode=en&DocumentPartId=&Action=Launch
Amazon Linux Security Advisory ALAS-2023-2033 vom 2023-05-03
https://alas.aws.amazon.com/AL2/ALAS-2023-2033.html
Amazon Linux Security Advisory ALAS-2023-1741 vom 2023-05-04
https://alas.aws.amazon.com/ALAS-2023-1741.html
Splunk Security Advisory SVD-2024-1012 vom 2024-10-14
https://advisory.splunk.com//advisories/SVD-2024-1012
Ubuntu Security Notice USN-7698-1 vom 2025-08-19
https://ubuntu.com/security/notices/USN-7698-1
Ubuntu Security Notice USN-7713-1 vom 2025-08-25
https://ubuntu.com/security/notices/USN-7713-1