CVE-2020-36229

HighCVSS 7.5/10Last modified Oct 14, 2026

Description

A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in ad_keystring, resulting in denial of service.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-843

Affected software

No affected versions have been published.

Timeline

Published: Jan 26, 2021
Last modified: Oct 14, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-36237.8kernel failure due to load failures while running v1 path directly via kernel in Snapdragon Mobile in SM8250, SXR2130 CVE-2020-362307.5A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_elemen CVE-2020-362314.3Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view the metadata of boards they should not have access CVE-2020-362325.0The MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0 before 4.3.14, from version 4.3.2.0 before 4 CVE-2020-362337.8The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6.10.9, 7.x before 7.6.4, and from version 7.7 CVE-2020-362344.8Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Sc CVE-2020-362355.3Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field and custom SLA names CVE-2020-362366.1Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Sc CVE-2020-362375.3Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field options via an Inform CVE-2020-362385.3The /rest/api/1.0/render resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from v CVE-2020-362399.8Jira Data Center, Jira Core Data Center, Jira Software Data Center from version 6.3.0 before 8.5.16, from 8.6.0 before 8.13.8, from 8.14.0 b CVE-2020-36247.8u'A potential buffer overflow exists due to integer overflow when parsing handler options due to wrong data type usage in operation' in Snap