Bug 1899678 (CVE-2020-25710)

Summary: CVE-2020-25710 openldap: assertion failure in CSN normalization with invalid input
Product: [Other] Security Response Reporter: Guilherme de Almeida Suckevicz <gsuckevi>
Component: vulnerabilityAssignee: Red Hat Product Security <security-response-team>
Status: CLOSED ERRATA QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedCC: aboyko, asoldano, atangrin, bbaranow, bmaxwell, brian.stansberry, cbuissar, cdewolf, chazlett, csutherl, darran.lofthouse, dkreling, dosoudil, eleandro, gzaronik, iweiss, jawilson, jclere, jochrist, jperkins, jwon, krathod, kwills, ldap-maint, lgao, lnykryn, matushonek, mbabacek, msalle, msochure, msvehla, mturk, myarboro, nwallace, pjindal, pmackay, rguimara, rmeggins, rstancel, rsvoboda, scorneli, smaestri, spichugi, tcrider, tcullum, tom.jenkinson, vashirov, weli
Target Milestone: ---Keywords: Reopened, Security
Target Release: ---   
Hardware: All   
OS: Linux   
See Also: https://issues.redhat.com/browse/CRW-1390
Fixed In Version: openldap 2.4.56 Doc Type: If docs needed, set a value
Doc Text:
A flaw was found in OpenLDAP. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-03-02 22:20:23 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On: 1899679, 1900140, 2040538    
Bug Blocks: 1899680    

Description Guilherme de Almeida Suckevicz 2020-11-19 19:03:08 UTC
A malicious packet can force OpenLDAP to fail an assertion in csnNormalize23 function in servers/slapd/schema_init.c.


Upstream patch:

Comment 1 Guilherme de Almeida Suckevicz 2020-11-19 19:03:32 UTC
Created openldap tracking bugs for this issue:

Affects: fedora-all [bug 1899679]

Comment 8 Todd Cullum 2020-12-02 17:54:28 UTC

This flaw does not affect Red Hat Enterprise Linux 8 because the slapd server is not shipped in the Red Hat Enterprise Linux 8 repositories.

Comment 14 errata-xmlrpc 2022-02-22 16:59:57 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7

Via RHSA-2022:0621 https://access.redhat.com/errata/RHSA-2022:0621

Comment 15 Product Security DevOps Team 2022-03-02 22:20:18 UTC
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):