CVE-2020-36223
A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and…
Published Jan 26, 2021 · updated Oct 14, 2026 · openldap openldap
A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Jan 26, 2021 · NIST NVD
Detected
A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).
Oct 14, 2026 · NIST NVD
Updated
A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).
Affected
- cpe apple/mac os xversion unspecified
- cpe apple/mac os x10.14.6
- cpe debian/debian linux10.0
- cpe debian/debian linux9.0
- cpe openldap/openldapversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2020-36223
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2020-36223
30-day exploitation probability 4.2%
first.org - NIST NVDVulnerability recordCVE-2020-36223
A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).
nvd.nist.gov