CVE-2020-15719: Medium severity red hat openldap servers vulnerability
libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName (SAN). This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat Enterprise Linux.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-15719?
CVE-2020-15719 is a vulnerability in libldap in certain third-party OpenLDAP packages that has a certificate-validation flaw.
How does CVE-2020-15719 affect OpenLDAP?
CVE-2020-15719 affects certain third-party OpenLDAP packages when they are asserting RFC6125 support.
What is the severity of CVE-2020-15719?
CVE-2020-15719 has a severity level of medium with a severity value of 4.2.
How can I fix CVE-2020-15719?
To fix CVE-2020-15719, you should update to the fixed version of OpenLDAP, such as openldap-2.4.46-10.el8 in Red Hat Enterprise Linux.
Where can I find more information about CVE-2020-15719?
You can find more information about CVE-2020-15719 in the following references: - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00059.html - https://access.redhat.com/errata/RHBA-2019:3674