CVE-2020-36226
A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.
Published Jan 26, 2021 · updated Oct 14, 2026 · openldap openldap
A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.
Timeline
Detection, updates, and resolution for this record.
Jan 26, 2021 · NIST NVD
Detected
A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.
Oct 14, 2026 · NIST NVD
Updated
A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.
Affected
- cpe apple/mac os xversion unspecified
- cpe apple/mac os x10.14.6
- cpe debian/debian linux10.0
- cpe debian/debian linux9.0
- cpe openldap/openldapversion unspecified
Sources
- CVE.orgCVE-2020-36226
Official CVE identifier
cve.org - FIRST EPSSCVE-2020-36226
30-day exploitation probability 4.2%
first.org - NIST NVDCVE-2020-36226
A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.
nvd.nist.gov