VDB

DEBIAN-CVE-2020-36224

DEBIAN-CVE-2020-36224 PUBLISHED CVSS 7.5 HIGH

A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.

Risk Scores

CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Debian:14openldap0, 0, 0
Debian:13openldap0, 0, 0
Debian:11openldap0, 0, 0
Debian:12openldap0, 0, 0

Timeline

  • Jan 26, 2021 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›