CVE-2020-36223

Name of the Vulnerable Software and Affected Versions OpenLDAP versions prior to 2.4.57

Description The issue is related to a double free memory error during the handling of the Values Return Filter control, which can lead to a denial of service (DoS) when a specially crafted request is sent to slapd. This can cause the slapd service to crash, resulting in an out-of-bounds read. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

Recommendations For OpenLDAP versions prior to 2.4.57, update to version 2.4.57 or later to resolve the issue. As a temporary workaround, consider restricting access to the Values Return Filter control to minimize the risk of exploitation.