BIT-openldap-2020-12243: High severity openldap slapd vulnerability

Q: Who can exploit this issue?

An unauthenticated remote attacker can exploit it by sending an LDAP search filter containing nested boolean expressions to a vulnerable slapd server.

Q: What is the impact of successful exploitation?

Successful exploitation can crash the slapd daemon, causing a denial of service. The supplied severity vector indicates no confidentiality or integrity impact.

Q: Which deployments are affected?

OpenLDAP slapd versions before 2.4.50 are affected. The issue is in processing LDAP search filters, so deployments that accept LDAP search requests are exposed.

Q: What can be done if an upgrade is not immediately possible?

Restrict network access to the LDAP service to trusted clients and networks, reducing the ability of unauthenticated remote parties to submit malicious search filters.

Published Apr 28, 2020

Updated

In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).

Affected Software

1 affected component

openldap slapd<2.4.50

Event History

Apr 28, 2020

CVE Published

via OSV·07:15 PM

Data Sourced

via OSV·07:15 PM

DescriptionSeverity

Frequently Asked Questions

Who can exploit this issue?

An unauthenticated remote attacker can exploit it by sending an LDAP search filter containing nested boolean expressions to a vulnerable slapd server.

What is the impact of successful exploitation?

Successful exploitation can crash the slapd daemon, causing a denial of service. The supplied severity vector indicates no confidentiality or integrity impact.

Which deployments are affected?

OpenLDAP slapd versions before 2.4.50 are affected. The issue is in processing LDAP search filters, so deployments that accept LDAP search requests are exposed.

What can be done if an upgrade is not immediately possible?

Restrict network access to the LDAP service to trusted clients and networks, reducing the ability of unauthenticated remote parties to submit malicious search filters.

BIT-openldap-2020-12243: High severity openldap slapd vulnerability

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the impact of successful exploitation?

Which deployments are affected?

What can be done if an upgrade is not immediately possible?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the impact of successful exploitation?

Which deployments are affected?

What can be done if an upgrade is not immediately possible?