← Back

CVE-2020-12243

nvd nist
Published: Apr 28, 2020Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).

Affected (59)

Products: Openldap: Openldap · Debian: Debian Linux · Opensuse: Leap · +5 more
Show all products
Openldap: Openldap · Debian: Debian Linux · Opensuse: Leap · Canonical: Ubuntu Linux · Netapp: Cloud Backup, Steelstore Cloud Integrated Storage, H410c Firmware, H300s Firmware, H500s Firmware, H700s Firmware, H300e Firmware, H500e Firmware, H700e Firmware, H410s Firmware · Broadcom: Brocade Fabric Operating System · Apple: Mac Os X · Oracle: Solaris, Zfs Storage Appliance Kit
Openldap
1 product
Openldap
Debian
1 product
Debian Linux
Opensuse
1 product
Leap
Canonical
1 product
Ubuntu Linux
Netapp
10 products
Cloud Backup
Steelstore Cloud Integrated Storage
H410c Firmware
H300s Firmware
H500s Firmware
H700s Firmware
H300e Firmware
H500e Firmware
H700e Firmware
H410s Firmware
Broadcom
1 product
Brocade Fabric Operating System
Apple
1 product
Mac Os X
Oracle
2 products
Solaris
Zfs Storage Appliance Kit
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Openldap
Before 2.4.50
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Debian
Debian Linux
Version 10.0
Debian Linux
Version 8.0
Debian Linux
Version 9.0
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Leap
Version 15.1
Configuration D
6 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 12.04
Ubuntu Linux
Version 14.04
Ubuntu Linux
Version 16.04
Ubuntu Linux
Version 18.04
Ubuntu Linux
Version 19.10
Ubuntu Linux
Version 20.04
Configuration E
2 vulnerable
Vulnerable SoftwareAffected Versions
Cloud Backup
All versions
Steelstore Cloud Integrated Storage
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H410c Firmware
All versions
Running on/withPlatform Versions
Netapp
H410c
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H300s Firmware
All versions
Running on/withPlatform Versions
Netapp
H300s
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H500s Firmware
All versions
Running on/withPlatform Versions
Netapp
H500s
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H700s Firmware
All versions
Running on/withPlatform Versions
Netapp
H700s
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H300e Firmware
All versions
Running on/withPlatform Versions
Netapp
H300e
All versions
Configuration K
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H500e Firmware
All versions
Running on/withPlatform Versions
Netapp
H500e
All versions
Configuration L
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H700e Firmware
All versions
Running on/withPlatform Versions
Netapp
H700e
All versions
Configuration M
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H410s Firmware
All versions
Running on/withPlatform Versions
Netapp
H410s
All versions
Configuration N
1 vulnerable
Vulnerable SoftwareAffected Versions
Brocade Fabric Operating System
All versions
Configuration O
34 vulnerable
Vulnerable SoftwareAffected Versions
Apple
Mac Os X
From 10.13.0 to 10.13.6
Mac Os X
From 10.14.0 to 10.14.6
Mac Os X
From 10.15 to 10.15.6
Mac Os X
Version 10.13.6 security_update_2018-002
Mac Os X
Version 10.13.6 security_update_2018-003
Mac Os X
Version 10.13.6 security_update_2019-001
Mac Os X
Version 10.13.6 security_update_2019-002
Mac Os X
Version 10.13.6 security_update_2019-003
Mac Os X
Version 10.13.6 security_update_2019-004
Mac Os X
Version 10.13.6 security_update_2019-005
Mac Os X
Version 10.13.6 security_update_2019-006
Mac Os X
Version 10.13.6 security_update_2019-007
Mac Os X
Version 10.13.6 security_update_2020-001
Mac Os X
Version 10.13.6 security_update_2020-002
Mac Os X
Version 10.13.6 security_update_2020-003
Mac Os X
Version 10.13.6 supplemental_update
Mac Os X
Version 10.14.6 security_update_2019-001
Mac Os X
Version 10.14.6 security_update_2019-002
Mac Os X
Version 10.14.6 security_update_2019-004
Mac Os X
Version 10.14.6 security_update_2019-005
Mac Os X
Version 10.14.6 security_update_2019-006
Mac Os X
Version 10.14.6 security_update_2019-007
Mac Os X
Version 10.14.6 security_update_2020-001
Mac Os X
Version 10.14.6 security_update_2020-002
Mac Os X
Version 10.14.6 security_update_2020-003
Mac Os X
Version 10.14.6 security_update_2020-004
Mac Os X
Version 10.14.6 security_update_2020-005
Mac Os X
Version 10.14.6 security_update_2020-006
Mac Os X
Version 10.14.6 security_update_2020-007
Mac Os X
Version 10.14.6 security_update_2021-001
Mac Os X
Version 10.14.6 security_update_2021-002
Mac Os X
Version 10.14.6 security_update_2021-003
Mac Os X
Version 10.14.6 supplemental_update
Mac Os X
Version 10.14.6 supplemental_update_2
Configuration P
3 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Solaris
Version 10
Solaris
Version 11
Zfs Storage Appliance Kit
Version 8.8

Related CWEs

CWE-674
Uncontrolled Recursion
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

References (24)

Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
ExploitPatchVendor Advisory
Source: cve@mitre.org
Release NotesVendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory

Timeline

No history available yet.