CVE-2020-25692
HighAdvisory
Published 30 Oct 2020In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.022
- 82nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 379
- of 17,781 indexed, latest versions
- Container images
- 278
- deployed by those charts
- Fix available
- 4 of 4
- affected packages
Red Hat Security Advisory: openldap security update
Carried by container images the latest versions of 379 of 17,781 indexed charts deploy, on 278 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| openldapdeb | 2.4.31-1+nmu2ubuntu8, 2.4.31-1+nmu2ubuntu8.4, 2.4.31-1+nmu2ubuntu8.5, 2.4.42+dfsg-2ubuntu3.2+21 more | 2.4.31-1+nmu2ubuntu8.5+esm3, 2.4.42+dfsg-2ubuntu3.10, 2.4.44+dfsg-5+deb9u5, 2.4.45+dfsg-1ubuntu1.7+2 more | 231 |
| openldaprpm | 2.4.44-21.el7_6, 2.4.44-22.el7 | 0:2.4.44-23.el7_9 | 24 |
| openldapapk | 2.4.47-r2, 2.4.48-r0, 2.4.48-r1, 2.4.48-r2+1 more | 2.4.48-r2, 2.4.48-r3, 2.4.50-r1 | 17 |
| openldap2rpm | 2.4.46-9.28.2, 2.4.46-9.31.1, 2.4.46-9.37.1, 2.4.46-lp151.10.3.1 | 2.4.46-9.40.1, 2.4.46-lp151.10.21.1 | 6 |
- OSV records
- ALPINE-CVE-2020-25692RHSA-2021:1389UBUNTU-CVE-2020-25692DLA-2425-1DSA-4782-1openSUSE-SU-2020:1920-1SUSE-SU-2020:3313-1
- Also known as
- USN-4622-1, USN-4622-2
Charts affected
379 by stars
Container images carrying it
278 by charts deploying them
A fixed version is listed for 4 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| svtechnmaa/ | e19aba397c1f | openldap | 2.4.47+dfsg-3+deb10u3 | 1 |
| tensorflow/ | 1e3172090703 | openldap | 2.4.42+dfsg-2ubuntu3.10 | 1 |
| testhubio/ | 56badee134b9 | openldap | 2.4.47+dfsg-3+deb10u3 | 1 |
| timothyclarke/ | 22c41e5ca7e2 | openldap | 2.4.42+dfsg-2ubuntu3.10 | 1 |
| tpdock/ | 3da600c95a49 | openldap | 2.4.42+dfsg-2ubuntu3.10 | 1 |
| voltha/ | 59ab2a00f712 | openldap | 2.4.31-1+nmu2ubuntu8.5+esm3 | 1 |
| vromero/ | 408d6a46b153 | openldap | 2.4.44+dfsg-5+deb9u5 | 1 |
| wavefronthq/ | d1064d28f6eb | openldap | 2.4.45+dfsg-1ubuntu1.7 | 1 |
| weblate/ | 82848df56ecd | openldap | 2.4.47+dfsg-3+deb10u3 | 1 |
| wiremind/ | 4dea42c8166c | openldap | 2.4.47+dfsg-3+deb10u3 | 1 |
| yandex/ | ab1738a64b70 | openldap | 2.4.45+dfsg-1ubuntu1.7 | 1 |
| yandex/ | ccf9c2b5e3f2 | openldap | 2.4.45+dfsg-1ubuntu1.7 | 1 |
| yandex/ | d210dc69321e | openldap | 2.4.45+dfsg-1ubuntu1.7 | 1 |
| gcr.io/ | 809338a69bd5 | openldap | 2.4.45+dfsg-1ubuntu1.7 | 1 |
| gcr.io/ | 10f4dbc8eeeb | openldap | 2.4.42+dfsg-2ubuntu3.10 | 1 |
| gcr.io/ | cb5c1bddd1b5 | openldap | 2.4.42+dfsg-2ubuntu3.10 | 1 |
| gcr.io/ | 5ea7b7f3632a | openldap | 2.4.42+dfsg-2ubuntu3.10 | 1 |
| gcr.io/ | 8f9ff98fdbef | openldap | 2.4.42+dfsg-2ubuntu3.10 | 1 |
| ghcr.io/ | 61daa1bba5cb | openldap2 | 2.4.46-9.40.1 | 1 |
| ghcr.io/ | c7c70b527255 | openldap2 | 2.4.46-9.40.1 | 1 |
| ghcr.io/ | d8a0334cddfc | openldap | 2.4.47+dfsg-3+deb10u3 | 1 |
| ghcr.io/ | d6e901ad0ebd | openldap | 2.4.47+dfsg-3+deb10u3 | 1 |
| ghcr.io/ | 451706815103 | openldap | 2.4.44+dfsg-5+deb9u5 | 1 |
| ghcr.io/ | 763daf9caf8e | openldap | 2.4.44+dfsg-5+deb9u5 | 1 |
| quay.io/ | 5d25d47d6e17 | openldap | 2.4.50-r1 | 1 |
| quay.io/ | 01c3b7acb301 | openldap | 2.4.44+dfsg-5+deb9u5 | 1 |
| quay.io/ | a8b21cec412c | openldap | 2.4.47+dfsg-3+deb10u3 | 1 |
| quay.io/ | 9a8d95ca0bd9 | openldap | 2.4.47+dfsg-3+deb10u3 | 1 |