In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-openldap | Jun 16, 2020 | Apr 28, 2020 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-openldapamazon-linux-ami-2-upgrade-openldap-clientsamazon-linux-ami-2-upgrade-openldap-debuginfoamazon-linux-ami-2-upgrade-openldap-develamazon-linux-ami-2-upgrade-openldap-serversamazon-linux-ami-2-upgrade-openldap-servers-sql | Oct 28, 2020 | Apr 28, 2020 | |
| Apple Osx Openldap | apple-osx-security-update-2020-004-high-sierraapple-osx-security-update-2020-004-mojaveapple-osx-upgrade-latest | Sep 22, 2020 | Apr 28, 2020 | |
| Centos_linux | — | centos-upgrade-openldapcentos-upgrade-openldap-clientscentos-upgrade-openldap-debuginfocentos-upgrade-openldap-develcentos-upgrade-openldap-serverscentos-upgrade-openldap-servers-sql | Oct 1, 2020 | Apr 28, 2020 |
| Debian | debian-upgrade-openldap | Apr 30, 2020 | Apr 28, 2020 | |
| Freebsd | freebsd-upgrade-package-openldap24-server | Apr 29, 2020 | Apr 28, 2020 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-compat-openldap | Jun 17, 2020 | Apr 28, 2020 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-compat-openldap | Sep 28, 2020 | Apr 28, 2020 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-compat-openldap | Jun 3, 2020 | Apr 28, 2020 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-openldaphuawei-euleros-2_0_sp8-upgrade-openldap-clientshuawei-euleros-2_0_sp8-upgrade-openldap-develhuawei-euleros-2_0_sp8-upgrade-openldap-servers | May 27, 2020 | Apr 28, 2020 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Sep 19, 2022 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-service-network-ldap-openldap-2-4-50-0-0-11-4-22-0-1-69-4oracle-solaris-11-4-upgrade-system-network-ldap-openldap-2-4-50-0-0-11-4-22-0-1-69-4 | Jan 19, 2021 | Apr 28, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-openldaporacle-linux-upgrade-openldap-clientsoracle-linux-upgrade-openldap-develoracle-linux-upgrade-openldap-serversoracle-linux-upgrade-openldap-servers-sql | Oct 7, 2020 | Apr 28, 2020 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-openldapredhat-upgrade-openldap-clientsredhat-upgrade-openldap-debuginforedhat-upgrade-openldap-develredhat-upgrade-openldap-serversredhat-upgrade-openldap-servers-sql | Oct 1, 2020 | Apr 28, 2020 | |
| Suse | — | suse-upgrade-compat-libldap-2_3-0suse-upgrade-libldap-2_4-2suse-upgrade-libldap-2_4-2-32bitsuse-upgrade-libldap-datasuse-upgrade-libldap-openssl1-2_4-2suse-upgrade-libldap-openssl1-2_4-2-32bitsuse-upgrade-libldap-openssl1-2_4-2-x86suse-upgrade-openldap2suse-upgrade-openldap2-back-metasuse-upgrade-openldap2-back-perlsuse-upgrade-openldap2-back-socksuse-upgrade-openldap2-back-sqlsuse-upgrade-openldap2-clientsuse-upgrade-openldap2-client-openssl1suse-upgrade-openldap2-contribsuse-upgrade-openldap2-develsuse-upgrade-openldap2-devel-32bitsuse-upgrade-openldap2-devel-staticsuse-upgrade-openldap2-docsuse-upgrade-openldap2-openssl1suse-upgrade-openldap2-ppolicy-check-password | May 7, 2020 | Apr 28, 2020 |
| Ubuntu | ubuntu-pro-upgrade-slapdubuntu-upgrade-slapd | May 7, 2020 | Apr 28, 2020 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Apr 28, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub