CVE-2020-36221

Name of the Vulnerable Software and Affected Versions OpenLDAP versions prior to 2.4.57

Description The issue is related to an integer underflow in the OpenLDAP implementation, which can be exploited by a remote attacker to cause a denial of service. This is achieved by sending a specially crafted request that triggers a crash in the Certificate Exact Assertion processing, specifically in the serialNumberAndIssuerCheck function within schema init.c. The exploitation can result in the slapd service crashing.

Recommendations For versions prior to 2.4.57, update to version 2.4.57 or later to resolve the issue. As a temporary workaround, consider restricting access to the Certificate Exact Assertion processing to minimize the risk of exploitation.