CVE-2020-25710 - Openldap Openldap, Redhat Jboss Core Services and Redhat Jboss Enterprise Web Server

Critical 7.5

A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.

Affected software

Openldap Openldap

Redhat Jboss Core Services

Redhat Jboss Enterprise Web Server

Redhat Jboss Enterprise Application Platform

Debian Debian Linux

Redhat Enterprise Linux

Fedoraproject Fedora

Reference links

Get alerted to vulnerabilities in your software

CVE alerts, vulnerability alerts, latest versions and news matched to your software stack.