CVE-2020-36224
A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
Published Jan 26, 2021 · updated Oct 14, 2026 · openldap openldap
A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
Timeline
Detection, updates, and resolution for this record.
Jan 26, 2021 · NIST NVD
Detected
A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
Oct 14, 2026 · NIST NVD
Updated
A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
Affected
- cpe apple/mac os xversion unspecified
- cpe apple/mac os x10.14.6
- cpe debian/debian linux10.0
- cpe debian/debian linux9.0
- cpe openldap/openldapversion unspecified
Sources
- CVE.orgCVE-2020-36224
Official CVE identifier
cve.org - FIRST EPSSCVE-2020-36224
30-day exploitation probability 4.3%
first.org - NIST NVDCVE-2020-36224
A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
nvd.nist.gov