CVE-2020-36223: Double Free
A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).
Other sources
OpenLDAP. This issue was addressed with improved checks.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/openldapto a version that resolves this vulnerability.Fixed in 2.4.47+dfsg-3+deb10u7Fixed in 2.4.57+dfsg-3+deb11u1Fixed in 2.5.13+dfsg-5 - Upgrade
Upgrade
Apple macOSto a version that resolves this vulnerability.Fixed in 11.4
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2021-30678
- CVE-2021-30676
- CVE-2021-30688
- CVE-2021-30669
- CVE-2021-30707
- CVE-2021-30685
- CVE-2021-30672
- CVE-2021-30681
- CVE-2021-30686
- CVE-2021-30733
- CVE-2021-30753
- CVE-2021-30727
- CVE-2021-30724
- CVE-2021-30673
- CVE-2021-30771
- CVE-2021-30755
- CVE-2021-30684
- CVE-2021-30735
- CVE-2021-30697
- CVE-2021-30710
- CVE-2021-30683
- CVE-2021-30687
- CVE-2021-30700
- CVE-2021-30701
- CVE-2021-30705
- CVE-2021-30706
- CVE-2021-30719
- CVE-2021-30728
- CVE-2021-30726
- CVE-2021-30731
- CVE-2021-30740
- CVE-2021-30704
- CVE-2021-30715
- CVE-2021-30736
- CVE-2021-30739
- CVE-2021-30703
- CVE-2021-30680
- CVE-2021-30677
- CVE-2021-30702
- CVE-2021-30696
- CVE-2021-30756
- CVE-2021-30723
- CVE-2021-30691
- CVE-2021-30692
- CVE-2021-30694
- CVE-2021-30725
- CVE-2021-30746
- CVE-2021-30693
- CVE-2021-30695
- CVE-2021-30708
- CVE-2021-30709
- CVE-2021-30679
- CVE-2020-36226
- CVE-2020-36227
- CVE-2020-36223
- CVE-2020-36224
- CVE-2020-36225
- CVE-2020-36221
- CVE-2020-36228
- CVE-2020-36222
- CVE-2020-36230
- CVE-2020-36229
- CVE-2021-30738
- CVE-2021-30751
- CVE-2021-30737
- CVE-2021-30716
- CVE-2021-30717
- CVE-2021-30721
- CVE-2021-30722
- CVE-2021-30712
- CVE-2021-30668
- CVE-2021-30718
- CVE-2021-30671
- CVE-2021-30713
- CVE-2021-30744
- CVE-2021-21779
- CVE-2021-30682
- CVE-2021-30689
- CVE-2021-30749
- CVE-2021-30734
- CVE-2021-30720
- CVE-2021-23841
- CVE-2021-30698
- CVE-2020-29629
- CVE-2021-1884
- CVE-2021-1883
- CVE-2021-30743
- CVE-2021-30819
- CVE-2021-30690
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2020-36223.
What is the affected software?
The affected software includes macOS Big Sur 11.4, macOS Mojave, and macOS Catalina.
What was the fix for this vulnerability?
This vulnerability was addressed with improved checks.
Is there any additional information available for this vulnerability?
Yes, you can find additional information at the following references: [Reference 1](https://support.apple.com/en-us/HT212530), [Reference 2](https://support.apple.com/en-us/HT212529), [Reference 3](https://support.apple.com/en-us/HT212531).
How severe is CVE-2020-36223?
The severity of CVE-2020-36223 is not specified.