CVE-2020-25692 @ mufasa

"CVE-2020-25692"
"openldap-2.4.44-25.el7_9.tuxcare.els1"
"alt-openldap11-2.4.59-2.el7"
"alt-openldap11-devel-2.4.59-2.el7"
"Am I vulnerable?"

Status

not_applicable

Priority

7.0

Match score

4.0

Risk

DoS Remote

CVSS

7.5 HIGH

Reason

cpe: openldap; pkgs: openldap; version: in-range: openldap-2.4.44-25.el7_9.tuxcare.els1; risk:dos

Created

2026-10-20T18:18:19Z

Updated

2026-10-20T19:09:20Z

Closed

2026-10-20T18:24:22Z

Package interrogation (copy)

Run on the host — click to copy a command. RPM

Package	Commands
openldap-2.4.44-25.el7_9.tuxcare.els1
alt-openldap11-2.4.59-2.el7
alt-openldap11-devel-2.4.59-2.el7

Inventory lookup

Search package inventory across systems, then return here. Create a ticket on systems the matcher missed.

Suggestions: openldap

System	Matches	Ticket for CVE-2020-25692
morris	alt-openldap11 2.4.59; alt-openldap11-devel 2.4.59; openldap 2.4.44; openldap-devel 2.4.44	not_applicable open
mufasa	alt-openldap11 2.4.59; alt-openldap11-devel 2.4.59; openldap 2.4.44	not_applicable open

Related CVE (same fix)

This CVE is subordinated to primary CVE-2022-29155 — same product as CVE-2022-29155

Host OS / kernel

CloudLinux release 7.9 (Boris Yegorov) (7.9) · cloudlinux

Arch

x86_64

kernel_release

uname -r → 3.10.0-962.3.2.lve1.5.89.el7.x86_64

kernel_version

uname -v → #1 SMP Thu Jul 9 15:55:31 UTC 2026

For Linux kernel CVEs, kernel_version (Debian packaging / build string) often decides fixed vs not; kernel_release is used for upstream NVD range compares.

Same CVE on other hosts

Open the ticket for this CVE on another system.

System	Status	Priority	Updated
morris	not_applicable	7.0	2026-10-20T19:09:20Z	Open

Description

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.

Determination

Related to primary CVE-2022-29155: same product as CVE-2022-29155

Update status

Add note only

Mitigation log

2026-10-20T18:24:22Z — not_applicable

Related to primary CVE-2022-29155: same product as CVE-2022-29155

References

NVD: CVE-2020-25692