high7.5
CVE-2020-12243
In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).
Impact
In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openldap | Openldap | before 2.4.50 |
| Debian | Debian Linux | Versions 8.0, 9.0, 10.0 |
| Opensuse | Leap | Version 15.1 |
| Canonical | Ubuntu Linux | Versions 12.04, 14.04, 16.04, 18.04, 19.10, 20.04 |
| Netapp | Cloud Backup | All versions |
| Netapp | Steelstore Cloud Integrated Storage | All versions |
| Netapp | H410c Firmware | All versions |
| Netapp | H300s Firmware | All versions |
| Netapp | H500s Firmware | All versions |
| Netapp | H700s Firmware | All versions |
| Netapp | H300e Firmware | All versions |
| Netapp | H500e Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00016.html
- https://bugs.openldap.org/show_bug.cgi?id=9202
- https://git.openldap.org/openldap/openldap/-/blob/OPENLDAP_REL_ENG_2_4/CHANGES
- https://git.openldap.org/openldap/openldap/-/commit/98464c11df8247d6a11b52e294ba5dd4f0380440
- https://lists.debian.org/debian-lts-announce/2020/05/msg00001.html
- https://security.netapp.com/advisory/ntap-20200511-0003/
- https://support.apple.com/kb/HT211289
- https://usn.ubuntu.com/4352-1/
- https://usn.ubuntu.com/4352-2/
- https://www.debian.org/security/2020/dsa-4666
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html