CVE-2020-36223

HighCVSS 7.5/10Last modified Oct 14, 2026

Description

A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125CWE-415

Affected software

No affected versions have been published.

Timeline

Published
Jan 26, 2021
Last modified
Oct 14, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-362247.5A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting CVE-2020-362257.5A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial CVE-2020-362267.5A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resCVE-2020-362277.5A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in deCVE-2020-362287.5An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, rCVE-2020-362297.5A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in ad_keystring, resultinCVE-2020-36237.8kernel failure due to load failures while running v1 path directly via kernel in Snapdragon Mobile in SM8250, SXR2130CVE-2020-362307.5A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_elemenCVE-2020-362314.3Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view the metadata of boards they should not have accessCVE-2020-362325.0The MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0 before 4.3.14, from version 4.3.2.0 before 4CVE-2020-362337.8The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6.10.9, 7.x before 7.6.4, and from version 7.7CVE-2020-362344.8Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Sc