Vulnerabilities > Debian > High

DATE CVE VULNERABILITY TITLE RISK
2021-01-26 CVE-2020-36227 Infinite Loop vulnerability in multiple products
A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.
network
low complexity
openldap debian apple CWE-835
7.5
2021-01-26 CVE-2020-36226 A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.
network
low complexity
openldap debian apple
7.5
2021-01-26 CVE-2020-36225 Double Free vulnerability in multiple products
A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
network
low complexity
openldap debian apple CWE-415
7.5
2021-01-26 CVE-2020-36224 Release of Invalid Pointer or Reference vulnerability in multiple products
A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
network
low complexity
openldap debian apple CWE-763
7.5
2021-01-26 CVE-2020-36223 Double Free vulnerability in multiple products
A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).
network
low complexity
openldap debian apple CWE-415
7.5
2021-01-26 CVE-2020-36222 Reachable Assertion vulnerability in multiple products
A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.
network
low complexity
openldap debian apple CWE-617
7.5
2021-01-26 CVE-2020-36221 Integer Underflow (Wrap or Wraparound) vulnerability in multiple products
An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).
network
low complexity
openldap debian apple CWE-191
7.5
2021-01-26 CVE-2020-27814 A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files.
local
low complexity
uclouvain debian
7.8
2021-01-20 CVE-2020-25682 A flaw was found in dnsmasq before 2.83.
network
high complexity
thekelleys fedoraproject debian
8.1
2021-01-20 CVE-2020-25681 A flaw was found in dnsmasq before version 2.83.
network
high complexity
thekelleys fedoraproject debian
8.1