Test ID:	1.3.6.1.4.1.25623.1.0.146991
Category:	Denial of Service
Title:	OpenLDAP < 2.4.57 Multiple DoS Vulnerabilities
Summary:	OpenLDAP is prone to multiple denial of service (DoS); vulnerabilities.
Description:	Summary: OpenLDAP is prone to multiple denial of service (DoS) vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2020-36221: Integer underflow leading to slapd crashes in the Certificate Exact Assertion processing - CVE-2020-36222: Assertion failure in slapd in the saslAuthzTo validation - CVE-2020-36223: slapd crash in the Values Return Filter control handling - CVE-2020-36224: Invalid pointer free and slapd crash in the saslAuthzTo processing - CVE-2020-36225: Double free and slapd crash in the saslAuthzTo processing - CVE-2020-36226: memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing - CVE-2020-36227: Infinite loop in slapd with the cancel_extop Cancel operation - CVE-2020-36228: Integer underflow leading to a slapd crash in the Certificate List Exact Assertion processing - CVE-2020-36229: slapd crash in the X.509 DN parsing in ad_keystring - CVE-2020-36230: Assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element Affected Software/OS: OpenLDAP prior to version 2.4.57. Solution: Update to version 2.4.57 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-36221 Debian Security Information: DSA-4845 (Google Search) https://www.debian.org/security/2021/dsa-4845 http://seclists.org/fulldisclosure/2021/May/70 http://seclists.org/fulldisclosure/2021/May/65 http://seclists.org/fulldisclosure/2021/May/64 https://bugs.openldap.org/show_bug.cgi?id=9404 https://bugs.openldap.org/show_bug.cgi?id=9424 https://git.openldap.org/openldap/openldap/-/commit/38ac838e4150c626bbfa0082b7e2cf3a2bb4df31 https://git.openldap.org/openldap/openldap/-/commit/58c1748e81c843c5b6e61648d2a4d1d82b47e842 https://git.openldap.org/openldap/openldap/-/tags/OPENLDAP_REL_ENG_2_4_57 https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E https://lists.debian.org/debian-lts-announce/2021/02/msg00005.html Common Vulnerability Exposure (CVE) ID: CVE-2020-36222 https://bugs.openldap.org/show_bug.cgi?id=9406 https://bugs.openldap.org/show_bug.cgi?id=9407 https://git.openldap.org/openldap/openldap/-/commit/02dfc32d658fadc25e4040f78e36592f6e1e1ca0 https://git.openldap.org/openldap/openldap/-/commit/6ed057b5b728b50746c869bcc9c1f85d0bbbf6ed https://git.openldap.org/openldap/openldap/-/commit/6ed057b5b728b50746c869bcc9c1f85d0bbbf6ed.aa Common Vulnerability Exposure (CVE) ID: CVE-2020-36223 https://bugs.openldap.org/show_bug.cgi?id=9408 https://git.openldap.org/openldap/openldap/-/commit/21981053a1195ae1555e23df4d9ac68d34ede9dd Common Vulnerability Exposure (CVE) ID: CVE-2020-36224 https://bugs.openldap.org/show_bug.cgi?id=9409 https://git.openldap.org/openldap/openldap/-/commit/554dff1927176579d652f2fe60c90e9abbad4c65 https://git.openldap.org/openldap/openldap/-/commit/5a2017d4e61a6ddc4dcb4415028e0d08eb6bca26 https://git.openldap.org/openldap/openldap/-/commit/c0b61a9486508e5202aa2e0cfb68c9813731b439 https://git.openldap.org/openldap/openldap/-/commit/d169e7958a3e0dc70f59c8374bf8a59833b7bdd8 Common Vulnerability Exposure (CVE) ID: CVE-2020-36225 https://bugs.openldap.org/show_bug.cgi?id=9412 Common Vulnerability Exposure (CVE) ID: CVE-2020-36226 https://bugs.openldap.org/show_bug.cgi?id=9413 https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c@%3Cissues.guacamole.apache.org%3E Common Vulnerability Exposure (CVE) ID: CVE-2020-36227 https://bugs.openldap.org/show_bug.cgi?id=9428 https://git.openldap.org/openldap/openldap/-/commit/9d0e8485f3113505743baabf1167e01e4558ccf5 Common Vulnerability Exposure (CVE) ID: CVE-2020-36228 https://bugs.openldap.org/show_bug.cgi?id=9427 https://git.openldap.org/openldap/openldap/-/commit/91dccd25c347733b365adc74cb07d074512ed5ad Common Vulnerability Exposure (CVE) ID: CVE-2020-36229 https://bugs.openldap.org/show_bug.cgi?id=9425 https://git.openldap.org/openldap/openldap/-/commit/4bdfffd2889c0c5cdf58bebafbdc8fce4bb2bff0 Common Vulnerability Exposure (CVE) ID: CVE-2020-36230 https://bugs.openldap.org/show_bug.cgi?id=9423 https://git.openldap.org/openldap/openldap/-/commit/8c1d96ee36ed98b32cd0e28b7069c7b8ea09d793
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.