This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2020-12243 →
DEBIAN-CVE-2020-12243
In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).
Original description
The description as published by the source.
In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
openldap
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50+dfsg-1"}]}]
Debian:13
openldap
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50+dfsg-1"}]}]
Debian:14
openldap
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50+dfsg-1"}]}]
References
- advisory security-tracker.debian.org