CVE-2020-36225: Double Free
A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
Other sources
OpenLDAP. This issue was addressed with improved checks.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/openldapto a version that resolves this vulnerability.Fixed in 2.4.47+dfsg-3+deb10u7Fixed in 2.4.57+dfsg-3+deb11u1Fixed in 2.5.13+dfsg-5 - Upgrade
Upgrade
Apple macOSto a version that resolves this vulnerability.Fixed in 11.4
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2021-30678
- CVE-2021-30676
- CVE-2021-30688
- CVE-2021-30669
- CVE-2021-30707
- CVE-2021-30685
- CVE-2021-30672
- CVE-2021-30681
- CVE-2021-30686
- CVE-2021-30733
- CVE-2021-30753
- CVE-2021-30727
- CVE-2021-30724
- CVE-2021-30673
- CVE-2021-30771
- CVE-2021-30755
- CVE-2021-30684
- CVE-2021-30735
- CVE-2021-30697
- CVE-2021-30710
- CVE-2021-30683
- CVE-2021-30687
- CVE-2021-30700
- CVE-2021-30701
- CVE-2021-30705
- CVE-2021-30706
- CVE-2021-30719
- CVE-2021-30728
- CVE-2021-30726
- CVE-2021-30731
- CVE-2021-30740
- CVE-2021-30704
- CVE-2021-30715
- CVE-2021-30736
- CVE-2021-30739
- CVE-2021-30703
- CVE-2021-30680
- CVE-2021-30677
- CVE-2021-30702
- CVE-2021-30696
- CVE-2021-30756
- CVE-2021-30723
- CVE-2021-30691
- CVE-2021-30692
- CVE-2021-30694
- CVE-2021-30725
- CVE-2021-30746
- CVE-2021-30693
- CVE-2021-30695
- CVE-2021-30708
- CVE-2021-30709
- CVE-2021-30679
- CVE-2020-36226
- CVE-2020-36227
- CVE-2020-36223
- CVE-2020-36224
- CVE-2020-36225
- CVE-2020-36221
- CVE-2020-36228
- CVE-2020-36222
- CVE-2020-36230
- CVE-2020-36229
- CVE-2021-30738
- CVE-2021-30751
- CVE-2021-30737
- CVE-2021-30716
- CVE-2021-30717
- CVE-2021-30721
- CVE-2021-30722
- CVE-2021-30712
- CVE-2021-30668
- CVE-2021-30718
- CVE-2021-30671
- CVE-2021-30713
- CVE-2021-30744
- CVE-2021-21779
- CVE-2021-30682
- CVE-2021-30689
- CVE-2021-30749
- CVE-2021-30734
- CVE-2021-30720
- CVE-2021-23841
- CVE-2021-30698
- CVE-2020-29629
- CVE-2021-1884
- CVE-2021-1883
- CVE-2021-30743
- CVE-2021-30819
- CVE-2021-30690
Frequently Asked Questions
What is CVE-2020-36225?
CVE-2020-36225 is a vulnerability in OpenLDAP that has been addressed with improved checks.
What software versions are affected by CVE-2020-36225?
The affected software versions are macOS Big Sur up to version 11.4, Mojave, and Catalina.
How can I fix CVE-2020-36225?
To fix CVE-2020-36225, ensure that you have updated your macOS to the latest version as recommended by Apple.
Where can I find more information about CVE-2020-36225?
You can find more information about CVE-2020-36225 in the following references provided by Apple: [Reference 1](https://support.apple.com/en-us/HT212530), [Reference 2](https://support.apple.com/en-us/HT212529), [Reference 3](https://support.apple.com/en-us/HT212531).
How severe is CVE-2020-36225?
The severity of CVE-2020-36225 is not mentioned in the given information.