This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2020-36228 →

DEBIAN-CVE-2020-36228

An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting i...

Original description

The description as published by the source.

An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 openldap

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57+dfsg-1"}]}]

Debian:13 openldap

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57+dfsg-1"}]}]

Debian:14 openldap

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57+dfsg-1"}]}]

References

advisory security-tracker.debian.org