CVE-2020-25709

openldap: assertion failure in Certificate List syntax validation

Published May 18, 2021 CVSS 3.1 · 7.5 High EPSS 3.4% KEV · Not listed
Description
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-2481-1 openldap security update
Debian DSA Debian DSA DSA-4792-1 openldap security update
Ubuntu USN Ubuntu USN USN-4634-1 OpenLDAP vulnerabilities
Ubuntu USN Ubuntu USN USN-4634-2 OpenLDAP vulnerabilities
Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Oct 14, 2026, 9:35 AM
Reserved
Sep 16, 2020, 12:00 AM
Status
Modified
Published
May 18, 2021, 12:15 PM
Modified
Oct 14, 2026, 10:17 AM
Severity
Moderate
Public date
Nov 2, 2020, 12:00 AM