cbcvebase.
CVE-2020-36228
published 2021-01-26

CVE-2020-36228: An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial…

PriorityP356high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
83.38%
99.6th percentile
An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service.

Affected

17 ranges
VendorProductVersion rangeFixed in
applemacos>= 11.1 < 11.411.4
applemacos_big_sur
applesecurity_update_2021-003_catalina
applesecurity_update_2021-004_mojave
debiandebian_linux
debiandebian_linux
debianopenldap< openldap 2.4.57+dfsg-1 (bookworm)openldap 2.4.57+dfsg-1 (bookworm)
msrccm1_openldap_2.4.57-2_on_cbl_mariner_1.0
openldapopenldap< 2.4.572.4.57
openldapopenldap>= 0 < 2.4.57+dfsg-12.4.57+dfsg-1
openldapopenldap>= 0 < 2.4.57+dfsg-12.4.57+dfsg-1
openldapopenldap>= 0 < 2.4.57+dfsg-12.4.57+dfsg-1
openldapopenldap>= 0 < 2.4.57+dfsg-12.4.57+dfsg-1
openldapopenldap>= 0 < 2.4.42+dfsg-2ubuntu3.122.4.42+dfsg-2ubuntu3.12
openldapopenldap>= 0 < 2.4.45+dfsg-1ubuntu1.92.4.45+dfsg-1ubuntu1.9
openldapopenldap>= 0 < 2.4.49+dfsg-2ubuntu1.62.4.49+dfsg-2ubuntu1.6
openldapopenldap>= 0 < 2.4.31-1+nmu2ubuntu8.5+esm72.4.31-1+nmu2ubuntu8.5+esm7

Detection & IOCsextracted from sources · hover to see the quote

  • Vulnerability resides in the Certificate List Exact Assertion processing path within slapd (OpenLDAP daemon); monitor for unexpected slapd crashes which may indicate exploitation attempts triggering the integer underflow in issuerAndThisUpdateCheck in schema_init.c
  • Affected function is issuerAndThisUpdateCheck in schema_init.c; focus code review and runtime monitoring on this function within slapd
  • ·Red Hat Enterprise Linux 8 and 9 are not affected because the slapd server is not shipped in those versions; only environments running slapd (e.g., RHEL 6/7, Debian, macOS, Azure Linux/CBL-Mariner) are at risk
  • ·Fixed in OpenLDAP 2.4.57; ensure slapd is upgraded to at least this version across all affected platforms

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv7.5HIGH
vendor_debian7.5HIGH
vendor_msrc7.5HIGH
vendor_redhat7.5HIGH
vendor_ubuntu7.5HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.