CVE Vulnerabilities

CVE-2020-36227

Loop with Unreachable Exit Condition ('Infinite Loop')

Published: Jan 26, 2021 | Modified: Nov 07, 2023
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
7.5 MODERATE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM

A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.

Weakness

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Affected Software

Name Vendor Start Version End Version
Openldap Openldap * 2.4.57 (excluding)
Openldap Ubuntu bionic *
Openldap Ubuntu devel *
Openldap Ubuntu esm-infra-legacy/trusty *
Openldap Ubuntu focal *
Openldap Ubuntu groovy *
Openldap Ubuntu hirsute *
Openldap Ubuntu impish *
Openldap Ubuntu jammy *
Openldap Ubuntu kinetic *
Openldap Ubuntu lunar *
Openldap Ubuntu mantic *
Openldap Ubuntu noble *
Openldap Ubuntu oracular *
Openldap Ubuntu precise/esm *
Openldap Ubuntu trusty *
Openldap Ubuntu trusty/esm *
Openldap Ubuntu upstream *
Openldap Ubuntu xenial *

References