CVE catalog

CVE-2020-12243

openldap: CVE-2020-12243

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
4.72% · Oct 25, 2026

In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianopenldapsid2.6.14+dfsg-2fixed
Debianopenldapforky2.6.14+dfsg-2fixed
Debianopenldaptrixie2.6.10+dfsg-1fixed
Debianopenldapbookworm2.5.13+dfsg-5fixed
CpeopenldapNot reported2.4.50fixed
Cpedebian_linuxNot reportedNot reportedunknown
CpeleapNot reportedNot reportedunknown
Cpeubuntu_linuxNot reportedNot reportedunknown
Cpecloud_backupNot reportedNot reportedunknown
Cpesteelstore_cloud_integrated_storageNot reportedNot reportedunknown
Cpeh410c_firmwareNot reportedNot reportedunknown
Cpeh300s_firmwareNot reportedNot reportedunknown
Cpeh500s_firmwareNot reportedNot reportedunknown
Cpeh700s_firmwareNot reportedNot reportedunknown
Cpeh300e_firmwareNot reportedNot reportedunknown
Cpeh500e_firmwareNot reportedNot reportedunknown
Cpeh700e_firmwareNot reportedNot reportedunknown
Alpineopenldap3.102.4.48-r1fixed
Alpineopenldap3.112.4.48-r2fixed
Alpineopenldap3.122.4.50-r0fixed
Alpineopenldap3.132.4.50-r0fixed
Alpineopenldap3.142.4.50-r0fixed
Alpineopenldap3.152.4.50-r0fixed
Alpineopenldap3.162.4.50-r0fixed
Alpineopenldap3.172.4.50-r0fixed
Alpineopenldap3.182.4.50-r0fixed
Alpineopenldap3.192.4.50-r0fixed
Alpineopenldap3.202.4.50-r0fixed
Alpineopenldap3.212.4.50-r0fixed
Alpineopenldap3.222.4.50-r0fixed
Alpineopenldap3.232.4.50-r0fixed
Alpineopenldap3.242.4.50-r0fixed
Alpineopenldap3.82.4.48-r1fixed
Alpineopenldap3.92.4.48-r1fixed
Ubuntuopenldappro2.4.31-1+nmu2ubuntu3vulnerable
Ubuntuopenldappro2.4.31-1+nmu2ubuntu4vulnerable
Ubuntuopenldappro2.4.31-1+nmu2ubuntu5vulnerable
Ubuntuopenldappro2.4.31-1+nmu2ubuntu8vulnerable
Ubuntuopenldappro2.4.31-1+nmu2ubuntu8.1vulnerable
Ubuntuopenldappro2.4.31-1+nmu2ubuntu8.2vulnerable
Ubuntuopenldappro2.4.31-1+nmu2ubuntu8.3vulnerable
Ubuntuopenldappro2.4.31-1+nmu2ubuntu8.4vulnerable
Ubuntuopenldappro2.4.31-1+nmu2ubuntu8.5vulnerable
Ubuntuopenldappro2.4.31-1+nmu2ubuntu8.5+esm1vulnerable
Ubuntuopenldappro2.4.31-1+nmu2ubuntu8.5+esm2fixed
Ubuntuopenldap16.042.4.41+dfsg-1ubuntu2vulnerable
Ubuntuopenldap16.042.4.41+dfsg-1ubuntu3vulnerable
Ubuntuopenldap16.042.4.42+dfsg-2ubuntu1vulnerable
Ubuntuopenldap16.042.4.42+dfsg-2ubuntu3vulnerable
Ubuntuopenldap16.042.4.42+dfsg-2ubuntu3.1vulnerable
Ubuntuopenldap16.042.4.42+dfsg-2ubuntu3.2vulnerable
Ubuntuopenldap16.042.4.42+dfsg-2ubuntu3.3vulnerable
Ubuntuopenldap16.042.4.42+dfsg-2ubuntu3.4vulnerable
Ubuntuopenldap16.042.4.42+dfsg-2ubuntu3.5vulnerable
Ubuntuopenldap16.042.4.42+dfsg-2ubuntu3.6vulnerable
Ubuntuopenldap16.042.4.42+dfsg-2ubuntu3.7vulnerable
Ubuntuopenldap16.042.4.42+dfsg-2ubuntu3.8fixed
Ubuntuopenldap18.042.4.45+dfsg-1ubuntu1vulnerable
Ubuntuopenldap18.042.4.45+dfsg-1ubuntu1.1vulnerable
Ubuntuopenldap18.042.4.45+dfsg-1ubuntu1.2vulnerable
Ubuntuopenldap18.042.4.45+dfsg-1ubuntu1.3vulnerable
Ubuntuopenldap18.042.4.45+dfsg-1ubuntu1.4vulnerable
Ubuntuopenldap18.042.4.45+dfsg-1ubuntu1.5fixed
Ubuntuopenldap20.042.4.48+dfsg-1ubuntu1vulnerable
Ubuntuopenldap20.042.4.48+dfsg-1ubuntu2vulnerable
Ubuntuopenldap20.042.4.48+dfsg-1ubuntu3vulnerable
Ubuntuopenldap20.042.4.48+dfsg-1ubuntu4vulnerable
Ubuntuopenldap20.042.4.49+dfsg-1ubuntu1vulnerable
Ubuntuopenldap20.042.4.49+dfsg-2ubuntu1vulnerable
Ubuntuopenldap20.042.4.49+dfsg-2ubuntu1.2fixed
Ubuntuopenldappro2.4.31-1+nmu2ubuntu3vulnerable
Ubuntuopenldappro2.4.31-1+nmu2ubuntu4vulnerable
Ubuntuopenldappro2.4.31-1+nmu2ubuntu5vulnerable
Ubuntuopenldappro2.4.31-1+nmu2ubuntu8vulnerable
Ubuntuopenldappro2.4.31-1+nmu2ubuntu8.1vulnerable
Ubuntuopenldappro2.4.31-1+nmu2ubuntu8.2vulnerable
Ubuntuopenldappro2.4.31-1+nmu2ubuntu8.3vulnerable
Ubuntuopenldappro2.4.31-1+nmu2ubuntu8.4vulnerable
Ubuntuopenldappro2.4.31-1+nmu2ubuntu8.5vulnerable
Ubuntuopenldappro2.4.31-1+nmu2ubuntu8.5+esm1vulnerable
Ubuntuopenldappro2.4.31-1+nmu2ubuntu8.5+esm2fixed
Ubuntuopenldap16.042.4.41+dfsg-1ubuntu2vulnerable
Ubuntuopenldap16.042.4.41+dfsg-1ubuntu3vulnerable
Ubuntuopenldap16.042.4.42+dfsg-2ubuntu1vulnerable
Ubuntuopenldap16.042.4.42+dfsg-2ubuntu3vulnerable
Ubuntuopenldap16.042.4.42+dfsg-2ubuntu3.1vulnerable
Ubuntuopenldap16.042.4.42+dfsg-2ubuntu3.2vulnerable
Ubuntuopenldap16.042.4.42+dfsg-2ubuntu3.3vulnerable
Ubuntuopenldap16.042.4.42+dfsg-2ubuntu3.4vulnerable
Ubuntuopenldap16.042.4.42+dfsg-2ubuntu3.5vulnerable
Ubuntuopenldap16.042.4.42+dfsg-2ubuntu3.6vulnerable
Ubuntuopenldap16.042.4.42+dfsg-2ubuntu3.7vulnerable
Ubuntuopenldap16.042.4.42+dfsg-2ubuntu3.8fixed
Ubuntuopenldap18.042.4.45+dfsg-1ubuntu1vulnerable
Ubuntuopenldap18.042.4.45+dfsg-1ubuntu1.1vulnerable
Ubuntuopenldap18.042.4.45+dfsg-1ubuntu1.2vulnerable
Ubuntuopenldap18.042.4.45+dfsg-1ubuntu1.3vulnerable
Ubuntuopenldap18.042.4.45+dfsg-1ubuntu1.4vulnerable
Ubuntuopenldap18.042.4.45+dfsg-1ubuntu1.5fixed
Ubuntuopenldap20.042.4.48+dfsg-1ubuntu1vulnerable
Ubuntuopenldap20.042.4.48+dfsg-1ubuntu2vulnerable
Ubuntuopenldap20.042.4.48+dfsg-1ubuntu3vulnerable
Ubuntuopenldap20.042.4.48+dfsg-1ubuntu4vulnerable
Ubuntuopenldap20.042.4.49+dfsg-1ubuntu1vulnerable
Ubuntuopenldap20.042.4.49+dfsg-2ubuntu1vulnerable
Ubuntuopenldap20.042.4.49+dfsg-2ubuntu1.2fixed
Suseopenldap2hpe helion openstack 82.4.41-18.68.1fixed
Suseopenldap2openstack cloud 72.4.41-18.68.1fixed
Suseopenldap2openstack cloud 82.4.41-18.68.1fixed
Suseopenldap2openstack cloud crowbar 82.4.41-18.68.1fixed
Suseopenldap2linux enterprise server for sap applications 12 sp22.4.41-18.68.1fixed
Suseopenldap2linux enterprise server for sap applications 12 sp32.4.41-18.68.1fixed
Suseopenldap2linux enterprise software development kit 12 sp42.4.41-18.68.1fixed
Suseopenldap2linux enterprise software development kit 12 sp52.4.41-18.68.1fixed
Suseopenldap2linux enterprise server 12 sp2-ltss2.4.41-18.68.1fixed
Suseopenldap2linux enterprise server 12 sp2-bcl2.4.41-18.68.1fixed
Suseopenldap2linux enterprise server 12 sp3-ltss2.4.41-18.68.1fixed
Suseopenldap2linux enterprise server 12 sp3-bcl2.4.41-18.68.1fixed
Suseopenldap2linux enterprise server 12 sp42.4.41-18.68.1fixed
Suseopenldap2linux enterprise server for sap applications 12 sp42.4.41-18.68.1fixed
Suseopenldap2linux enterprise server 12 sp52.4.41-18.68.1fixed
Suseopenldap2linux enterprise server for sap applications 12 sp52.4.41-18.68.1fixed
Suseopenldap2enterprise storage 52.4.41-18.68.1fixed
Opensuseopenldap2leap 15.12.4.46-lp151.10.9.1fixed
Suseopenldap2-client-openssl1linux enterprise server 11-security2.4.26-0.74.9.1fixed
Suseopenldap2linux enterprise point of sale 11 sp32.4.26-0.74.9.1fixed
Suseopenldap2-clientlinux enterprise point of sale 11 sp32.4.26-0.74.9.1fixed
Suseopenldap2linux enterprise server 11 sp4-ltss2.4.26-0.74.9.1fixed
Suseopenldap2-clientlinux enterprise server 11 sp4-ltss2.4.26-0.74.9.1fixed
Suseopenldap2linux enterprise module for basesystem 15 sp12.4.46-9.28.2fixed
Suseopenldap2linux enterprise module for development tools 15 sp12.4.46-9.28.2fixed
Suseopenldap2linux enterprise module for legacy 15 sp12.4.46-9.28.2fixed
Suseopenldap2linux enterprise high performance computing 15-espos2.4.46-9.28.2fixed
Suseopenldap2linux enterprise high performance computing 15-ltss2.4.46-9.28.2fixed
Suseopenldap2linux enterprise server 15-ltss2.4.46-9.28.2fixed
Suseopenldap2linux enterprise server for sap applications 152.4.46-9.28.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianopenldapsourcesid2.4.50+dfsg-1not yet assignedNot reportedNot reported
Debianopenldapsourceforky2.4.50+dfsg-1not yet assignedNot reportedNot reported
Debianopenldapsourcetrixie2.4.50+dfsg-1not yet assignedNot reportedNot reported
Debianopenldapsourcebookworm2.4.50+dfsg-1not yet assignedNot reportedNot reported
CpeopenldapcpeNot reported2.4.50Not reportedNVD-CVE-2020-12243Not reported
Alpineopenldapapk3.102.4.48-r1Not reportedALPINE-CVE-2020-12243Not reported
Alpineopenldapapk3.112.4.48-r2Not reportedALPINE-CVE-2020-12243Not reported
Alpineopenldapapk3.122.4.50-r0Not reportedALPINE-CVE-2020-12243Not reported
Alpineopenldapapk3.132.4.50-r0Not reportedALPINE-CVE-2020-12243Not reported
Alpineopenldapapk3.142.4.50-r0Not reportedALPINE-CVE-2020-12243Not reported
Alpineopenldapapk3.152.4.50-r0Not reportedALPINE-CVE-2020-12243Not reported
Alpineopenldapapk3.162.4.50-r0Not reportedALPINE-CVE-2020-12243Not reported
Alpineopenldapapk3.172.4.50-r0Not reportedALPINE-CVE-2020-12243Not reported
Alpineopenldapapk3.182.4.50-r0Not reportedALPINE-CVE-2020-12243Not reported
Alpineopenldapapk3.192.4.50-r0Not reportedALPINE-CVE-2020-12243Not reported
Alpineopenldapapk3.202.4.50-r0Not reportedALPINE-CVE-2020-12243Not reported
Alpineopenldapapk3.212.4.50-r0Not reportedALPINE-CVE-2020-12243Not reported
Alpineopenldapapk3.222.4.50-r0Not reportedALPINE-CVE-2020-12243Not reported
Alpineopenldapapk3.232.4.50-r0Not reportedALPINE-CVE-2020-12243Not reported
Alpineopenldapapk3.242.4.50-r0Not reportedALPINE-CVE-2020-12243Not reported
Alpineopenldapapk3.82.4.48-r1Not reportedALPINE-CVE-2020-12243Not reported
Alpineopenldapapk3.92.4.48-r1Not reportedALPINE-CVE-2020-12243Not reported
Ubuntuopenldapdebpro2.4.31-1+nmu2ubuntu8.5+esm2Not reportedUBUNTU-CVE-2020-12243Not reported
Ubuntuopenldapdeb16.042.4.42+dfsg-2ubuntu3.8Not reportedUBUNTU-CVE-2020-12243Not reported
Ubuntuopenldapdeb18.042.4.45+dfsg-1ubuntu1.5Not reportedUBUNTU-CVE-2020-12243Not reported
Ubuntuopenldapdeb20.042.4.49+dfsg-2ubuntu1.2Not reportedUBUNTU-CVE-2020-12243Not reported
Ubuntuopenldapdebpro2.4.31-1+nmu2ubuntu8.5+esm2Not reportedUSN-4352-2Not reported
Ubuntuopenldapdeb16.042.4.42+dfsg-2ubuntu3.8Not reportedUSN-4352-1Not reported
Ubuntuopenldapdeb18.042.4.45+dfsg-1ubuntu1.5Not reportedUSN-4352-1Not reported
Ubuntuopenldapdeb20.042.4.49+dfsg-2ubuntu1.2Not reportedUSN-4352-1Not reported
Suseopenldap2rpmhpe helion openstack 82.4.41-18.68.1Not reportedSUSE-SU-2020:1193-1Not reported
Suseopenldap2rpmopenstack cloud 72.4.41-18.68.1Not reportedSUSE-SU-2020:1193-1Not reported
Suseopenldap2rpmopenstack cloud 82.4.41-18.68.1Not reportedSUSE-SU-2020:1193-1Not reported
Suseopenldap2rpmopenstack cloud crowbar 82.4.41-18.68.1Not reportedSUSE-SU-2020:1193-1Not reported
Suseopenldap2rpmlinux enterprise server for sap applications 12 sp22.4.41-18.68.1Not reportedSUSE-SU-2020:1193-1Not reported
Suseopenldap2rpmlinux enterprise server for sap applications 12 sp32.4.41-18.68.1Not reportedSUSE-SU-2020:1193-1Not reported
Suseopenldap2rpmlinux enterprise software development kit 12 sp42.4.41-18.68.1Not reportedSUSE-SU-2020:1193-1Not reported
Suseopenldap2rpmlinux enterprise software development kit 12 sp52.4.41-18.68.1Not reportedSUSE-SU-2020:1193-1Not reported
Suseopenldap2rpmlinux enterprise server 12 sp2-ltss2.4.41-18.68.1Not reportedSUSE-SU-2020:1193-1Not reported
Suseopenldap2rpmlinux enterprise server 12 sp2-bcl2.4.41-18.68.1Not reportedSUSE-SU-2020:1193-1Not reported
Suseopenldap2rpmlinux enterprise server 12 sp3-ltss2.4.41-18.68.1Not reportedSUSE-SU-2020:1193-1Not reported
Suseopenldap2rpmlinux enterprise server 12 sp3-bcl2.4.41-18.68.1Not reportedSUSE-SU-2020:1193-1Not reported
Suseopenldap2rpmlinux enterprise server 12 sp42.4.41-18.68.1Not reportedSUSE-SU-2020:1193-1Not reported
Suseopenldap2rpmlinux enterprise server for sap applications 12 sp42.4.41-18.68.1Not reportedSUSE-SU-2020:1193-1Not reported
Suseopenldap2rpmlinux enterprise server 12 sp52.4.41-18.68.1Not reportedSUSE-SU-2020:1193-1Not reported
Suseopenldap2rpmlinux enterprise server for sap applications 12 sp52.4.41-18.68.1Not reportedSUSE-SU-2020:1193-1Not reported
Suseopenldap2rpmenterprise storage 52.4.41-18.68.1Not reportedSUSE-SU-2020:1193-1Not reported
Opensuseopenldap2rpmleap 15.12.4.46-lp151.10.9.1Not reportedOPENSUSE-SU-2020:0647-1Not reported
Suseopenldap2-client-openssl1rpmlinux enterprise server 11-security2.4.26-0.74.9.1Not reportedSUSE-SU-2020:14358-1Not reported
Suseopenldap2rpmlinux enterprise point of sale 11 sp32.4.26-0.74.9.1Not reportedSUSE-SU-2020:14358-1Not reported
Suseopenldap2-clientrpmlinux enterprise point of sale 11 sp32.4.26-0.74.9.1Not reportedSUSE-SU-2020:14358-1Not reported
Suseopenldap2rpmlinux enterprise server 11 sp4-ltss2.4.26-0.74.9.1Not reportedSUSE-SU-2020:14358-1Not reported
Suseopenldap2-clientrpmlinux enterprise server 11 sp4-ltss2.4.26-0.74.9.1Not reportedSUSE-SU-2020:14358-1Not reported
Suseopenldap2rpmlinux enterprise module for basesystem 15 sp12.4.46-9.28.2Not reportedSUSE-SU-2020:1219-1Not reported
Suseopenldap2rpmlinux enterprise module for development tools 15 sp12.4.46-9.28.2Not reportedSUSE-SU-2020:1219-1Not reported
Suseopenldap2rpmlinux enterprise module for legacy 15 sp12.4.46-9.28.2Not reportedSUSE-SU-2020:1219-1Not reported
Suseopenldap2rpmlinux enterprise high performance computing 15-espos2.4.46-9.28.2Not reportedSUSE-SU-2020:1219-1Not reported
Suseopenldap2rpmlinux enterprise high performance computing 15-ltss2.4.46-9.28.2Not reportedSUSE-SU-2020:1219-1Not reported
Suseopenldap2rpmlinux enterprise server 15-ltss2.4.46-9.28.2Not reportedSUSE-SU-2020:1219-1Not reported
Suseopenldap2rpmlinux enterprise server for sap applications 152.4.46-9.28.2Not reportedSUSE-SU-2020:1219-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [ldap-utils]Unknown

    Source package: [openldap]

    Details (2)
    • 2.5.13+dfsg-5 · amd64 · bookworm

      Fixed · Fixed: 2.4.50+dfsg-1

      dsa · openldap · debian · bookworm

    • 2.5.13+dfsg-5 · arm64 · bookworm

      Fixed · Fixed: 2.4.50+dfsg-1

      dsa · openldap · debian · bookworm

  • [libldap-2.5-0]Unknown

    Source package: [openldap]

    Details (2)
    • 2.5.13+dfsg-5 · amd64 · bookworm

      Fixed · Fixed: 2.4.50+dfsg-1

      dsa · openldap · debian · bookworm

    • 2.5.13+dfsg-5 · arm64 · bookworm

      Fixed · Fixed: 2.4.50+dfsg-1

      dsa · openldap · debian · bookworm

  • [libldap2-dev]Unknown

    Source package: [openldap]

    Details (2)
    • 2.5.13+dfsg-5 · all · bookworm

      Fixed · Fixed: 2.4.50+dfsg-1

      dsa · openldap · debian · bookworm

    • 2.5.13+dfsg-5 · all · bookworm

      Fixed · Fixed: 2.4.50+dfsg-1

      dsa · openldap · debian · bookworm

  • Source package: [openldap]

    Details (2)
    • 2.5.13+dfsg-5 · all · bookworm

      Fixed · Fixed: 2.4.50+dfsg-1

      dsa · openldap · debian · bookworm

    • 2.5.13+dfsg-5 · all · bookworm

      Fixed · Fixed: 2.4.50+dfsg-1

      dsa · openldap · debian · bookworm

  • [libldap-dev]Unknown

    Source package: [openldap]

    Details (2)
    • 2.5.13+dfsg-5 · amd64 · bookworm

      Fixed · Fixed: 2.4.50+dfsg-1

      dsa · openldap · debian · bookworm

    • 2.5.13+dfsg-5 · arm64 · bookworm

      Fixed · Fixed: 2.4.50+dfsg-1

      dsa · openldap · debian · bookworm

  • [slapd]Unknown

    Source package: [openldap]

    Details (2)
    • 2.5.13+dfsg-5 · amd64 · bookworm

      Fixed · Fixed: 2.4.50+dfsg-1

      dsa · openldap · debian · bookworm

    • 2.5.13+dfsg-5 · arm64 · bookworm

      Fixed · Fixed: 2.4.50+dfsg-1

      dsa · openldap · debian · bookworm

  • [slapd-contrib]Unknown

    Source package: [openldap]

    Details (2)
    • 2.5.13+dfsg-5 · amd64 · bookworm

      Fixed · Fixed: 2.4.50+dfsg-1

      dsa · openldap · debian · bookworm

    • 2.5.13+dfsg-5 · arm64 · bookworm

      Fixed · Fixed: 2.4.50+dfsg-1

      dsa · openldap · debian · bookworm

  • Source package: [openldap]

    Details (2)
    • 2.5.13+dfsg-5 · all · bookworm

      Fixed · Fixed: 2.4.50+dfsg-1

      dsa · openldap · debian · bookworm

    • 2.5.13+dfsg-5 · all · bookworm

      Fixed · Fixed: 2.4.50+dfsg-1

      dsa · openldap · debian · bookworm

  • [slapi-dev]Unknown

    Source package: [openldap]

    Details (2)
    • 2.5.13+dfsg-5 · amd64 · bookworm

      Fixed · Fixed: 2.4.50+dfsg-1

      dsa · openldap · debian · bookworm

    • 2.5.13+dfsg-5 · arm64 · bookworm

      Fixed · Fixed: 2.4.50+dfsg-1

      dsa · openldap · debian · bookworm

Observed:

References