VDB
GHSA-f4ph-wxvj-8j8g
GHSA-f4ph-wxvj-8j8g
PUBLISHED
CVSS 7.5 HIGH
Record from GitHub Advisory Database · Published May 24, 2022
A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
Risk scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Timeline
- May 24, 2022 CVE Published
- Apr 29, 2026 Distribution Patch
- Apr 30, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-f4ph-wxvj-8j8g
vulnetix vdb fixes GHSA-f4ph-wxvj-8j8gOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-f4ph-wxvj-8j8g/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2020-36224 advisory
- https://git.openldap.org/openldap/openldap/-/commit/5a2017d4e61a6ddc4dcb4415028e0d08eb6bca26 url
- https://lists.debian.org/debian-lts-announce/2021/02/msg00005.html url
- https://security.netapp.com/advisory/ntap-20210226-0002 url
- https://support.apple.com/kb/HT212530 url
- http://seclists.org/fulldisclosure/2021/May/64 url
- http://seclists.org/fulldisclosure/2021/May/70 url
- https://bugs.openldap.org/show_bug.cgi?id=9409 url
- https://git.openldap.org/openldap/openldap/-/commit/c0b61a9486508e5202aa2e0cfb68c9813731b439 url
- https://git.openldap.org/openldap/openldap/-/commit/d169e7958a3e0dc70f59c8374bf8a59833b7bdd8 url
- https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E url
- https://support.apple.com/kb/HT212529 url
- https://support.apple.com/kb/HT212531 url
- https://git.openldap.org/openldap/openldap/-/commit/554dff1927176579d652f2fe60c90e9abbad4c65 url
- https://git.openldap.org/openldap/openldap/-/tags/OPENLDAP_REL_ENG_2_4_57 url
- https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E url
- https://www.debian.org/security/2021/dsa-4845 url
- http://seclists.org/fulldisclosure/2021/May/65 url