Bug 759016 (CVE-2020-25692)

Summary:	<net-nds/openldap-2.4.56: Unauthenticated denial of service in slapd (CVE-2020-25692)
Product:	Gentoo Security	Reporter:	Sam James <sam>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	ldap-bugs, zlogene
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://bugzilla.redhat.com/show_bug.cgi?id=1894567
Whiteboard:	B3 [noglsa cve]
Package list:		Runtime testing required:	---

Description Sam James archtester

2020-12-08 07:29:23 UTC

Description:
"A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service."