Most recent entries from all

bdu:2022-00230

Withdrawn: BELL-CVE-2020-25710 — CVE-2020-25710 does not affect BellSoft software

Withdrawn by the publisher.

BIT-openldap-2020-25710

Affected: Bitnami: openldap

A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.

certfr-2022-avi-619 — De multiples vulnérabilités ont été découvertes dans IBM QRadar. Certaines d'entre elles permettent à un attaquant de p…

certfr-2022-avi-619

CLEANSTART-2026-FJ95448 — Security fix for CVE-2020-25710 applied in: openldap 2.4.56-r0

Affected: CleanStart: openldap

Security vulnerability affects the openldap package. This issue is resolved in later releases. See references for vulnerability details.

EUVD-2026-45742

fkie_cve-2020-25710

GHSA-8wg3-gqcw-9fq9

gsd-2020-25710

ICSA-22-116-01 — Hitachi Energy System Data Manager

In affected OpenSSL versions, the Raccoon attack exploits a flaw in the TLS specification that can lead to an attacker computing the pre-master secret in connections that have used a Diffie-Hellman-based ciphersuite. This allows the attacker to eavesdrop on all encrypted communications sent over that TLS connection.CVE-2020-1968 has been assigned to this vulnerability. A CVSS v3 base score of 3.7 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N). In affected versions of OpenLDAP, LDAP search filters with nested boolean expressions can result in a denial-of-service condition.CVE-2020-12243 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). A flaw in affected versions of the OpenLDAP slapd server may cause an assertion failure when processing a malicious packet. This may lead to a denial-of-service condition.CVE-2020-25709 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). A flaw in affected versions of OpenLDAP allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23() function. This may lead to a denial-of-service condition.CVE-2020-25710 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C…

OESA-2021-1244 — openldap security update

Affected: openEuler:20.03-LTS-SP1: openldap

OpenLDAP is an open source suite of LDAP (Lightweight Directory Access Protocol) applications and development tools. LDAP is a set of protocols for accessing directory services (usually phone book style information, but other information is possible) over the Internet, similar to the way DNS (Domain Name System) information is propagated over the Internet. The openldap package contains configuration files, libraries, and documentation for OpenLDAP. Security Fix(es): A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.(CVE-2020-25710)

openSUSE-SU-2021:0102-1 — Security update for openldap2

Security update for openldap2

SUSE-SU-2021:0128-1 — Security update for openldap2

Security update for openldap2

UBUNTU-CVE-2020-25710

Affected: Ubuntu:Pro:14.04:LTS: openldap, Ubuntu:16.04:LTS: openldap, Ubuntu:18.04:LTS: openldap, Ubuntu:20.04:LTS: openldap