high7.5
CVE-2020-25692
A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs.
Impact
A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openldap | Openldap | before 2.4.55 |
| Redhat | Enterprise Linux | Versions 5.0, 6.0, 7.0 |
| Netapp | Cloud Backup | All versions |
| Netapp | Solidfire Baseboard Management Controller Firmware | All versions |