Vulnerabilities > CVE-2020-36230 - Reachable Assertion vulnerability in multiple products

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH

Summary

A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service.

Vulnerable Configurations

Part Description Count
Application
Openldap
56
Application
Apache
1
OS
Debian
2
OS
Apple
30

Common Weakness Enumeration (CWE)

References