Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2020-25709
High · 7.5
CWE-617 May 18, 2021
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be...
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.
CVE-2021-27212
High · 7.5
CWE-617 Feb 14, 2021
In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur...
In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.
CVE-2021-3326
High · 7.5
CWE-617 Jan 27, 2021
The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing...
The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.
CVE-2020-36230
High · 7.5
CWE-617 Jan 26, 2021
A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X...
A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service.
CVE-2020-36222
High · 7.5
CWE-617 Jan 26, 2021
A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the...
A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.
CVE-2020-29562
Medium · 4.8
CWE-617 Dec 4, 2020
The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4...
The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.
CVE-2018-19539
Medium · 6.5
CWE-617 Nov 26, 2018
An issue was discovered in JasPer 2.0.14. There is an access violation in the function...
An issue was discovered in JasPer 2.0.14. There is an access violation in the function jas_image_readcmpt in libjasper/base/jas_image.c, leading to a denial of service.