IM
IronMonkey Threat Research

CVE-2020-25709 HIGH

Published: 2021-05-18 | Last Modified: 2024-11-21 | Status: Modified

Description

A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.

Additional Descriptions (1)

Se encontró un fallo en OpenLDAP. Este fallo permite a un atacante que puede enviar un paquete malicioso a ser procesado por el servidor slapd de OpenLDAP, para desencadenar un fallo de aserción. La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema

CVSS Metrics

Base Score: 7.5 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 3.6

Base Score: 5.0 (MEDIUM)

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access VectorNETWORK
Access ComplexityLOW
AuthenticationNONE
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactPARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 2.9

Weaknesses

Source Type Description
[email protected] Primary
en CWE-617

Affected Products

Vendor Product Version Update Type
openldap openldap * <built-in method update of dict object at 0x7fd289cef400> Application
debian debian_linux 9.0 <built-in method update of dict object at 0x7fd3686edec0> Operating System
debian debian_linux 10.0 <built-in method update of dict object at 0x7fd384917240> Operating System
apple mac_os_x * <built-in method update of dict object at 0x7fd3688a7340> Operating System
apple mac_os_x * <built-in method update of dict object at 0x7fd289cee840> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd289ced380> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd2dbc2bdc0> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd36a717780> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd348bbe880> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd289ced700> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd2dbc2b000> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd39c4d5a40> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd37015c2c0> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd3688a7780> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd36b7d61c0> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd36adf5000> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd348bbc940> Operating System
apple mac_os_x 10.15.7 <built-in method update of dict object at 0x7fd3844253c0> Operating System
apple mac_os_x 10.15.7 <built-in method update of dict object at 0x7fd3686eddc0> Operating System
apple mac_os_x 10.15.7 <built-in method update of dict object at 0x7fd3854bc700> Operating System
apple mac_os_x 10.15.7 <built-in method update of dict object at 0x7fd3688a6680> Operating System
apple macos * <built-in method update of dict object at 0x7fd3688a5900> Operating System
redhat jboss_core_services - <built-in method update of dict object at 0x7fd36b7d4980> Application

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-005:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-007:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*
Yes cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:redhat:jboss_core_services:-:*:*:*:*:*:*:*

References