https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-2953.htmlhttps://patchthecve.com/cve/CVE-2023-2953.htmlWed, 14 Oct 2026 21:17:15 +0000HIGH 7.5: A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.https://patchthecve.com/cve/CVE-2022-29155.htmlhttps://patchthecve.com/cve/CVE-2022-29155.htmlWed, 14 Oct 2026 17:17:38 +0000CRITICAL 9.8: In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.https://patchthecve.com/cve/CVE-2020-25710.htmlhttps://patchthecve.com/cve/CVE-2020-25710.htmlWed, 14 Oct 2026 10:17:33 +0000HIGH 7.5: A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.https://patchthecve.com/cve/CVE-2020-25709.htmlhttps://patchthecve.com/cve/CVE-2020-25709.htmlWed, 14 Oct 2026 10:17:33 +0000HIGH 7.5: A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.https://patchthecve.com/cve/CVE-2021-27212.htmlhttps://patchthecve.com/cve/CVE-2021-27212.htmlWed, 14 Oct 2026 12:17:09 +0000HIGH 7.5: In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.https://patchthecve.com/cve/CVE-2020-36230.htmlhttps://patchthecve.com/cve/CVE-2020-36230.htmlWed, 14 Oct 2026 10:17:37 +0000HIGH 7.5: A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service.https://patchthecve.com/cve/CVE-2020-36229.htmlhttps://patchthecve.com/cve/CVE-2020-36229.htmlWed, 14 Oct 2026 10:17:37 +0000HIGH 7.5: A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in ad_keystring, resulting in denial of service.https://patchthecve.com/cve/CVE-2020-36228.htmlhttps://patchthecve.com/cve/CVE-2020-36228.htmlWed, 14 Oct 2026 10:17:37 +0000HIGH 7.5: An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service.https://patchthecve.com/cve/CVE-2020-36227.htmlhttps://patchthecve.com/cve/CVE-2020-36227.htmlWed, 14 Oct 2026 10:17:37 +0000HIGH 7.5: A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.https://patchthecve.com/cve/CVE-2020-36226.htmlhttps://patchthecve.com/cve/CVE-2020-36226.htmlWed, 14 Oct 2026 10:17:36 +0000HIGH 7.5: A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.https://patchthecve.com/cve/CVE-2020-36225.htmlhttps://patchthecve.com/cve/CVE-2020-36225.htmlWed, 14 Oct 2026 10:17:36 +0000HIGH 7.5: A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service.https://patchthecve.com/cve/CVE-2020-36224.htmlhttps://patchthecve.com/cve/CVE-2020-36224.htmlWed, 14 Oct 2026 10:17:36 +0000HIGH 7.5: A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.https://patchthecve.com/cve/CVE-2020-36223.htmlhttps://patchthecve.com/cve/CVE-2020-36223.htmlWed, 14 Oct 2026 10:17:36 +0000HIGH 7.5: A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).https://patchthecve.com/cve/CVE-2020-36222.htmlhttps://patchthecve.com/cve/CVE-2020-36222.htmlWed, 14 Oct 2026 10:17:35 +0000HIGH 7.5: A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.https://patchthecve.com/cve/CVE-2020-36221.htmlhttps://patchthecve.com/cve/CVE-2020-36221.htmlWed, 14 Oct 2026 10:17:35 +0000HIGH 7.5: An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).https://patchthecve.com/cve/CVE-2020-25692.htmlhttps://patchthecve.com/cve/CVE-2020-25692.htmlWed, 14 Oct 2026 10:17:33 +0000HIGH 7.5: A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.https://patchthecve.com/cve/CVE-2020-15719.htmlhttps://patchthecve.com/cve/CVE-2020-15719.htmlWed, 17 Jun 2026 02:57:07 +0000MEDIUM 4.2: libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName (SAN). This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat Enterprise Linux.https://patchthecve.com/cve/CVE-2020-12243.htmlhttps://patchthecve.com/cve/CVE-2020-12243.htmlWed, 14 Oct 2026 10:17:25 +0000HIGH 7.5: In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).