Vulnerability · Published May 18, 2021 · Assigned by redhat
CVE-2020-25709
High 7.5
In plain English
A high-severity security flaw in OpenLDAP. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.4% (higher than 89% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)7.5High
Exploit odds (30 days)3.4%top 11.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine:v3.20 | openldap | 2.4.56-r0 | ALPINE-CVE-2020-25709 |
| Alpine:v3.21 | openldap | 2.4.56-r0 | ALPINE-CVE-2020-25709 |
| Alpine:v3.22 | openldap | 2.4.56-r0 | ALPINE-CVE-2020-25709 |
| Alpine:v3.23 | openldap | 2.4.56-r0 | ALPINE-CVE-2020-25709 |
| Alpine:v3.24 | openldap | 2.4.56-r0 | ALPINE-CVE-2020-25709 |
| Debian:12 | openldap | 2.4.56+dfsg-1 | DEBIAN-CVE-2020-25709 |
| Debian:13 | openldap | 2.4.56+dfsg-1 | DEBIAN-CVE-2020-25709 |
| Debian:14 | openldap | 2.4.56+dfsg-1 | DEBIAN-CVE-2020-25709 |
Affected products (as reported)
References
- DSA-4792 vendor-advisory, x_refsource_DEBIAN
- [debian-lts-announce] 20201204 [SECURITY] [DLA 2481-1] openldap security update mailing-list, x_refsource_MLIST
- https://support.apple.com/kb/HT212147 x_refsource_CONFIRM
- 20210201 APPLE-SA-2021-02-01-1 macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave mailing-list, x_refsource_FULLDISC
- https://bugzilla.redhat.com/show_bug.cgi?id=1899675 x_refsource_MISC
- [bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8 mailing-list, x_refsource_MLIST
- [bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8 mailing-list, x_refsource_MLIST
- https://security.netapp.com/advisory/ntap-20210716-0003/ x_refsource_CONFIRM
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html