CVE-2020-36230 A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_elemen

What is CVE-2020-36230?

CVE-2020-36230 is a high-severity vulnerability in Apple Mac Os X, published on 25 Jan 2021.

Official description

A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service.

Weakness: CWE-617

Which versions are affected by CVE-2020-36230?

1 open source package ship an affected version, including openldap. It affects 5 products.

Products include Apache Bookkeeper, Apple Mac Os X, Apple Macos, Debian Debian Linux, Openldap Openldap.

How do I fix CVE-2020-36230?

Upgrade openldap to 2.4.57 or later.

Is CVE-2020-36230 being exploited?

There is no known exploitation of CVE-2020-36230 in the wild and no public exploit code.

Other vulnerabilities in Apple Mac Os X

• CVE-2019-17571 Deserialization of Untrusted Data in Log4j Critical 9.8
• CVE-2017-6891 Memory corruption in GnuTLS libtasn1 High 8.8
• CVE-2019-19906 Memory corruption in n/a High 7.5
• CVE-2020-23922 Memory corruption in n/a High 7.1
• CVE-2022-32531 Apache BookKeeper: Java Client Uses Connection to Host that Failed Hostname Verification Medium 5.9

All Apple Mac Os X vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as ALPINE-CVE-2020-36230, BIT-openldap-2020-36230, CLEANSTART-2026-LQ91791, DEBIAN-CVE-2020-36230, GHSA-5g5w-44wh-969g, JLSEC-2026-172 and 1 more.