Findings

CVE-2020-36222

A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.

Published Jan 26, 2021 · updated Oct 14, 2026 · openldap openldap

A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.

Timeline

Detection, updates, and resolution for this record.

  1. Jan 26, 2021 · NIST NVD

    Detected

    A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.

  2. Oct 14, 2026 · NIST NVD

    Updated

    A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.

Affected

  • cpe apple/mac os xversion unspecified
  • cpe apple/mac os x10.14.6
  • cpe debian/debian linux10.0
  • cpe debian/debian linux9.0
  • cpe openldap/openldapversion unspecified

Sources

  • CVE.orgCVE-2020-36222

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2020-36222

    30-day exploitation probability 77.2%

    first.org
  • NIST NVDCVE-2020-36222

    A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.

    nvd.nist.gov

References