CVE-2020-25692: Null Pointer Dereference

Reference Links

• https://exchange.xforce.ibmcloud.com/vulnerabilities/191968
• https://www.ibm.com/support/pages/node/6493729 (Advisory)
• https://bugzilla.redhat.com/show_bug.cgi?id=1894567
• https://security.netapp.com/advisory/ntap-20210108-0006/
• https://bugs.openldap.org/show_bug.cgi?id=9370
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1895288
• https://git.openldap.org/openldap/openldap/-/commit/6abfd60078af02d56edb3b6897692cdd09a08971
• https://git.openldap.org/openldap/openldap/-/commit/a08a2db4063f54a6217a0f091aebd02f8bdb482e
• https://git.openldap.org/openldap/openldap/-/commit/4c774220a752bf8e3284984890dc0931fe73165d
• https://access.redhat.com/errata/RHSA-2021:1389
• https://access.redhat.com/security/cve/cve-2020-25692

Parent vulnerabilities

(Appears in the following advisories)

• IBM-6493729

Frequently Asked Questions

• What is CVE-2020-25692?

  CVE-2020-25692 is a vulnerability found in OpenLDAP server that allows an unauthenticated attacker to remotely crash the slapd process, causing a Denial of Service.

• How does CVE-2020-25692 affect OpenLDAP?

  CVE-2020-25692 affects OpenLDAP server versions up to and including 2.4.55.

• What is the severity rating of CVE-2020-25692?

  CVE-2020-25692 has a severity rating of 7.5, which is considered high.

• How can I fix CVE-2020-25692?

  To fix CVE-2020-25692, you need to update to OpenLDAP version 2.4.55 or higher.

• Where can I find more information about CVE-2020-25692?

  You can find more information about CVE-2020-25692 in the following references: [Bugzilla](https://bugzilla.redhat.com/show_bug.cgi?id=1894567), [NetApp Security Advisory](https://security.netapp.com/advisory/ntap-20210108-0006/), [IBM X-Force Exchange](https://exchange.xforce.ibmcloud.com/vulnerabilities/191968).