ZeroDay Findings
Sign inSign up

Findings

CVE-2020-25709

A flaw was found in OpenLDAP.

Published May 18, 2021 · updated Oct 14, 2026 · openldap openldap

A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 18, 2021 · NIST NVD

    Detected

    A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.

  2. Oct 14, 2026 · NIST NVD

    Updated

    A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.

Affected

  • cpe apple/mac os xversion unspecified
  • cpe apple/mac os x10.14.6
  • cpe debian/debian linux10.0
  • cpe debian/debian linux9.0
  • cpe openldap/openldapversion unspecified
  • cpe redhat/jboss core servicesversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2020-25709

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2020-25709

    30-day exploitation probability 3.4%

    first.org
  • NIST NVDVulnerability recordCVE-2020-25709

    A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.

    nvd.nist.gov

References

CVE-2020-25709 · ZeroDay Findings