CVE Vulnerabilities

CVE-2020-25692

NULL Pointer Dereference

Published: Dec 08, 2020 | Modified: Oct 12, 2022
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
7.5 MODERATE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.

Weakness

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

Affected Software

Name Vendor Start Version End Version
Openldap Openldap * 2.4.55 (excluding)
Red Hat Enterprise Linux 7 RedHat openldap-0:2.4.44-23.el7_9 *
Red Hat Migration Toolkit for Containers 1.4 RedHat rhmtc/openshift-migration-controller-rhel8:v1.4.6-4 *
Red Hat Migration Toolkit for Containers 1.4 RedHat rhmtc/openshift-migration-log-reader-rhel8:v1.4.6-4 *
Red Hat Migration Toolkit for Containers 1.4 RedHat rhmtc/openshift-migration-must-gather-rhel8:v1.4.6-4 *
Red Hat Migration Toolkit for Containers 1.4 RedHat rhmtc/openshift-migration-operator-bundle:v1.4.6-5 *
Red Hat Migration Toolkit for Containers 1.4 RedHat rhmtc/openshift-migration-registry-rhel8:v1.4.6-4 *
Red Hat Migration Toolkit for Containers 1.4 RedHat rhmtc/openshift-migration-rsync-transfer-rhel8:v1.4.6-4 *
Red Hat Migration Toolkit for Containers 1.4 RedHat rhmtc/openshift-migration-ui-rhel8:v1.4.6-4 *
Red Hat Migration Toolkit for Containers 1.4 RedHat rhmtc/openshift-migration-velero-plugin-for-aws-rhel8:v1.4.6-4 *
Red Hat Migration Toolkit for Containers 1.4 RedHat rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8:v1.4.6-3 *
Red Hat Migration Toolkit for Containers 1.4 RedHat rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8:v1.4.6-4 *
Red Hat Migration Toolkit for Containers 1.4 RedHat rhmtc/openshift-migration-velero-restic-restore-helper-rhel8:v1.4.6-5 *
Red Hat Migration Toolkit for Containers 1.4 RedHat rhmtc/openshift-migration-velero-rhel8:v1.4.6-5 *
Red Hat Migration Toolkit for Containers 1.4 RedHat rhmtc/openshift-velero-plugin-rhel8:v1.4.6-4 *
Openldap Ubuntu bionic *
Openldap Ubuntu devel *
Openldap Ubuntu focal *
Openldap Ubuntu groovy *
Openldap Ubuntu trusty *
Openldap Ubuntu trusty/esm *
Openldap Ubuntu upstream *
Openldap Ubuntu xenial *

Potential Mitigations

References