Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:BIT-OPENLDAP-2020-12243
HistoryMar 06, 2024 - 11:02 a.m.

BIT-openldap-2020-12243

2024-03-0611:02:43
Google
osv.dev
6
openldap
filter.c
denial of service

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.6 Medium

AI Score

Confidence

High

0.124 Low

EPSS

Percentile

95.4%

JSON

In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).

CPENameOperatorVersion
openldaplt2.4.50

Related

nessus 38
f5 1
osv 3
openvas 22
alpinelinux 1
prion 1
debiancve 1
debian 3
nvd 1
amazon 1
freebsd 1
cvelist 1
ubuntu 2
suse 1
redhatcve 1
veracode 1
ubuntucve 1
cve 1
centos 1
oraclelinux 1
redhat 8
checkpoint_advisories 1
mageia 1
photon 6
ics 2
apple 2
oracle 2
nessus
nessus
FreeBSD : nested filters leads to stack overflow (c7617931-8985-11ea-93ef-b42e99a1b9c3)
2020-04-29 00:00:00
EulerOS Virtualization for ARM 64 3.0.2.0 : openldap (EulerOS-SA-2020-1959)
2020-09-08 00:00:00
EulerOS Virtualization 3.0.2.2 : openldap (EulerOS-SA-2020-2230)
2020-10-21 00:00:00
f5
f5
K45243961 : OpenLDAP vulnerability CVE-2020-12243
2020-09-01 00:00:00
osv
osv
openldap - security update
2020-05-02 00:00:00
openldap - security update
2020-04-28 00:00:00
CVE-2020-12243
2020-04-28 19:15:12
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:1193-1)
2021-04-19 00:00:00
Huawei EulerOS: Security Advisory for openldap (EulerOS-SA-2020-1701)
2020-06-26 00:00:00
Huawei EulerOS: Security Advisory for openldap (EulerOS-SA-2020-1959)
2020-09-08 00:00:00
alpinelinux
alpinelinux
CVE-2020-12243
2020-04-28 19:15:12
prion
prion
Denial of service
2020-04-28 19:15:00
debiancve
debiancve
CVE-2020-12243
2020-04-28 19:15:12
debian
debian
[SECURITY] [DSA 4666-1] openldap security update
2020-04-28 19:09:22
[SECURITY] [DSA 4666-1] openldap security update
2020-04-28 19:09:22
[SECURITY] [DLA 2199-1] openldap security update
2020-05-02 12:52:54
nvd
nvd
CVE-2020-12243
2020-04-28 19:15:12
amazon
amazon
Medium: openldap
2020-10-22 18:29:00
freebsd
freebsd
nested filters leads to stack overflow
2020-04-28 00:00:00
cvelist
cvelist
CVE-2020-12243
2020-04-28 18:07:29
ubuntu
ubuntu
OpenLDAP vulnerability
2020-05-06 00:00:00
OpenLDAP vulnerability
2020-05-06 00:00:00
suse
suse
Security update for openldap2 (important)
2020-05-11 00:00:00
redhatcve
redhatcve
CVE-2020-12243
2020-05-08 20:09:54
veracode
veracode
Denial Of Service (DoS)
2020-08-06 21:39:59
ubuntucve
ubuntucve
CVE-2020-12243
2020-04-28 00:00:00
cve
cve
CVE-2020-12243
2020-04-28 19:15:12
centos
centos
openldap security update
2020-10-20 18:35:51
oraclelinux
oraclelinux
openldap security update
2020-10-06 00:00:00
redhat
redhat
(RHSA-2020:4041) Moderate: openldap security update
2020-09-29 07:54:05
(RHSA-2021:0949) Low: Red Hat OpenShift Do openshift/odo-init-image 1.1.3 security update
2021-03-22 09:48:51
(RHSA-2020:4255) Moderate: security update - Red Hat Ansible Tower 3.6 runner release (CVE-2019-18874)
2020-10-14 12:51:09
checkpoint_advisories
checkpoint_advisories
OpenLDAP Slapd Denial of Service (CVE-2020-12243)
2020-06-30 00:00:00
mageia
mageia
Updated openldap packages fix security vulnerabilities
2020-05-05 15:20:37
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0293
2020-05-12 00:00:00
Important Photon OS Security Update - PHSA-2020-0089
2020-05-13 00:00:00
Important Photon OS Security Update - PHSA-2020-0293
2020-05-12 00:00:00
ics
ics
Hitachi Energy System Data Manager
2022-04-26 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
apple
apple
About the security content of macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra - Apple Support
2020-12-15 06:08:19
About the security content of macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra
2020-07-15 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.6 Medium

AI Score

Confidence

High

0.124 Low

EPSS

Percentile

95.4%

JSON
Related for OSV:BIT-OPENLDAP-2020-12243
nessus38f51osv3openvas22alpinelinux1prion1debiancve1debian3nvd1amazon1freebsd1cvelist1ubuntu2suse1redhatcve1veracode1ubuntucve1cve1centos1oraclelinux1redhat8checkpoint_advisories1mageia1photon6ics2apple2oracle2