CVE-2020-36224

Description

A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.872

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities are fixed in MacOS Big Sur 11.4 - Software UpdateMac
Lightweight Directory Access Protocol (USN-4724-1) slapd_2.4.45+dfsg-1ubuntu1.9_i386.debLinux
Lightweight Directory Access Protocol (USN-4724-1) slapd_2.4.45+dfsg-1ubuntu1.9_amd64.debLinux
Lightweight Directory Access Protocol (USN-4724-1) slapd_2.4.49+dfsg-2ubuntu1.6_i386.debLinux
Lightweight Directory Access Protocol (USN-4724-1) slapd_2.4.49+dfsg-2ubuntu1.6_amd64.debLinux
Lightweight Directory Access Protocol (USN-4724-1) slapd_2.4.53+dfsg-1ubuntu1.3_i386.debLinux
Lightweight Directory Access Protocol (USN-4724-1) slapd_2.4.53+dfsg-1ubuntu1.3_amd64.debLinux
Lightweight Directory Access Protocol (USN-4724-1) slapd_2.4.42+dfsg-2ubuntu3.12_i386.debLinux
Lightweight Directory Access Protocol (USN-4724-1) slapd_2.4.42+dfsg-2ubuntu3.12_amd64.debLinux
Release of Invalid Pointer or Reference Vulnerability (CVE-2020-36224)NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-605752MacOS Big Sur 11.7.10 - Software Update (Force Reboot)(CVE-2023-41064)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234