CVE-2020-36225

Name of the Vulnerable Software and Affected Versions OpenLDAP versions prior to 2.4.57

Description The issue is related to a double free vulnerability in the OpenLDAP protocol, which can be exploited by a remote attacker to cause a denial of service (DoS) by sending a specially crafted request to slapd. This can lead to a crash in the saslAuthzTo processing.

Recommendations For versions prior to 2.4.57, update to version 2.4.57 or later to resolve the issue. As a temporary workaround, consider restricting access to the saslAuthzTo processing to minimize the risk of exploitation.