CVE ID:	CVE-2020-12243
Description:	In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).
Test IDs:	1.3.6.1.4.1.25623.1.0.853147   1.3.6.1.4.1.25623.1.1.4.2020.1219.1   1.3.6.1.4.1.25623.1.1.2.2020.2130   1.3.6.1.4.1.25623.1.1.2.2020.1612   1.3.6.1.4.1.25623.1.1.2.2020.1701   1.3.6.1.4.1.25623.1.1.2.2020.2230   1.3.6.1.4.1.25623.1.1.2.2020.1585   1.3.6.1.4.1.25623.1.1.2.2020.2141   1.3.6.1.4.1.25623.1.1.2.2020.1739   1.3.6.1.4.1.25623.1.0.844421   1.3.6.1.4.1.25623.1.1.10.2020.0200   1.3.6.1.4.1.25623.1.0.892199   1.3.6.1.4.1.25623.1.1.2.2020.1685   1.3.6.1.4.1.25623.1.1.2.2020.2334   1.3.6.1.4.1.25623.1.0.704666   1.3.6.1.4.1.25623.1.1.12.2020.4352.2   1.3.6.1.4.1.25623.1.1.2.2020.2240   1.3.6.1.4.1.25623.1.1.2.2020.1959   1.3.6.1.4.1.25623.1.1.4.2020.1193.1   1.3.6.1.4.1.25623.1.0.146994   1.3.6.1.4.1.25623.1.1.4.2020.14358.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2020-12243 https://git.openldap.org/openldap/openldap/-/blob/OPENLDAP_REL_ENG_2_4/CHANGES https://git.openldap.org/openldap/openldap/-/commit/98464c11df8247d6a11b52e294ba5dd4f0380440 https://security.netapp.com/advisory/ntap-20200511-0003/ https://support.apple.com/kb/HT211289 Debian Security Information: DSA-4666 (Google Search) https://www.debian.org/security/2020/dsa-4666 https://bugs.openldap.org/show_bug.cgi?id=9202 https://bugs.openldap.org/show_bug.cgi?id=9202 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpuoct2020.html https://www.oracle.com/security-alerts/cpuoct2020.html https://lists.debian.org/debian-lts-announce/2020/05/msg00001.html SuSE Security Announcement: openSUSE-SU-2020:0647 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00016.html https://usn.ubuntu.com/4352-1/ https://usn.ubuntu.com/4352-2/