CVE-2020-36225: Double Free

Reference Links

• https://support.apple.com/en-us/HT212529 (Advisory)
• http://seclists.org/fulldisclosure/2021/May/64
• http://seclists.org/fulldisclosure/2021/May/65
• http://seclists.org/fulldisclosure/2021/May/70
• https://bugs.openldap.org/show_bug.cgi?id=9412
• https://git.openldap.org/openldap/openldap/-/commit/554dff1927176579d652f2fe60c90e9abbad4c65
• https://git.openldap.org/openldap/openldap/-/commit/5a2017d4e61a6ddc4dcb4415028e0d08eb6bca26
• https://git.openldap.org/openldap/openldap/-/commit/c0b61a9486508e5202aa2e0cfb68c9813731b439
• https://git.openldap.org/openldap/openldap/-/commit/d169e7958a3e0dc70f59c8374bf8a59833b7bdd8
• https://git.openldap.org/openldap/openldap/-/tags/OPENLDAP_REL_ENG_2_4_57
• https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E
• https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E
• https://lists.debian.org/debian-lts-announce/2021/02/msg00005.html
• https://security.netapp.com/advisory/ntap-20210226-0002/
• https://support.apple.com/kb/HT212529
• https://support.apple.com/kb/HT212530
• https://support.apple.com/kb/HT212531
• https://www.debian.org/security/2021/dsa-4845
• https://security-tracker.debian.org/tracker/CVE-2020-36225

Parent vulnerabilities

(Appears in the following advisories)

• HT212529

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2021-30678
• CVE-2021-30676
• CVE-2021-30688
• CVE-2021-30669
• CVE-2021-30707
• CVE-2021-30685
• CVE-2021-30672
• CVE-2021-30681
• CVE-2021-30686
• CVE-2021-30733
• CVE-2021-30753
• CVE-2021-30727
• CVE-2021-30724
• CVE-2021-30673
• CVE-2021-30771
• CVE-2021-30755
• CVE-2021-30684
• CVE-2021-30735
• CVE-2021-30697
• CVE-2021-30710
• CVE-2021-30683
• CVE-2021-30687
• CVE-2021-30700
• CVE-2021-30701
• CVE-2021-30705
• CVE-2021-30706
• CVE-2021-30719
• CVE-2021-30728
• CVE-2021-30726
• CVE-2021-30731
• CVE-2021-30740
• CVE-2021-30704
• CVE-2021-30715
• CVE-2021-30736
• CVE-2021-30739
• CVE-2021-30703
• CVE-2021-30680
• CVE-2021-30677
• CVE-2021-30702
• CVE-2021-30696
• CVE-2021-30756
• CVE-2021-30723
• CVE-2021-30691
• CVE-2021-30692
• CVE-2021-30694
• CVE-2021-30725
• CVE-2021-30746
• CVE-2021-30693
• CVE-2021-30695
• CVE-2021-30708
• CVE-2021-30709
• CVE-2021-30679
• CVE-2020-36226
• CVE-2020-36227
• CVE-2020-36223
• CVE-2020-36224
• CVE-2020-36225
• CVE-2020-36221
• CVE-2020-36228
• CVE-2020-36222
• CVE-2020-36230
• CVE-2020-36229
• CVE-2021-30738
• CVE-2021-30751
• CVE-2021-30737
• CVE-2021-30716
• CVE-2021-30717
• CVE-2021-30721
• CVE-2021-30722
• CVE-2021-30712
• CVE-2021-30668
• CVE-2021-30718
• CVE-2021-30671
• CVE-2021-30713
• CVE-2021-30744
• CVE-2021-21779
• CVE-2021-30682
• CVE-2021-30689
• CVE-2021-30749
• CVE-2021-30734
• CVE-2021-30720
• CVE-2021-23841
• CVE-2021-30698

Frequently Asked Questions

• What is CVE-2020-36225?

  CVE-2020-36225 is a vulnerability in OpenLDAP that has been addressed with improved checks.

• What software versions are affected by CVE-2020-36225?

  The affected software versions are macOS Big Sur up to version 11.4, Mojave, and Catalina.

• How can I fix CVE-2020-36225?

  To fix CVE-2020-36225, ensure that you have updated your macOS to the latest version as recommended by Apple.

• Where can I find more information about CVE-2020-36225?

  You can find more information about CVE-2020-36225 in the following references provided by Apple: [Reference 1](https://support.apple.com/en-us/HT212530), [Reference 2](https://support.apple.com/en-us/HT212529), [Reference 3](https://support.apple.com/en-us/HT212531).

• How severe is CVE-2020-36225?

  The severity of CVE-2020-36225 is not mentioned in the given information.