A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openldap | May 18, 2021 | May 18, 2021 |
| Amazon Linux Ami 2 | — | Upgrade openldap-debuginfoUpgrade openldap-serversUpgrade openldap-servers-sqlUpgrade openldap-develUpgrade openldap-clientsUpgrade openldap | Jul 4, 2022 | May 18, 2021 |
| Apple Osx Openldap | — | Apply Apple macOS Security Update 2021-001 CatalinaUpgrade macOS to the latest versionApply Apple macOS Security Update 2021-001 Mojave | Feb 19, 2021 | Feb 1, 2021 |
| Centos_linux | — | Upgrade openldap-develUpgrade openldap-servers-sqlUpgrade openldap-clientsUpgrade openldap-serversUpgrade openldap-debuginfoUpgrade openldap | Feb 23, 2022 | May 18, 2021 |
| Debian | — | Upgrade openldap | Nov 19, 2020 | Nov 19, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openldapUpgrade openldap-develUpgrade openldap-clientsUpgrade openldap-servers | Sep 16, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openldapUpgrade openldap-clientsUpgrade openldap-develUpgrade openldap-servers | Oct 26, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openldap-develUpgrade openldapUpgrade openldap-serversUpgrade openldap-clients | Sep 7, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openldap-clientsUpgrade openldap-serversUpgrade openldap-develUpgrade openldap | Aug 10, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade openldap-clientsUpgrade openldapUpgrade openldap-servers | Aug 10, 2021 | May 18, 2021 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Jan 24, 2023 |
| Oracle_linux | — | Upgrade openldap-clientsUpgrade openldap-develUpgrade openldap-serversUpgrade openldapUpgrade openldap-servers-sql | Feb 23, 2022 | Nov 2, 2020 |
| Redhat_linux | — | Upgrade openldap-serversNo solution existsUpgrade openldap-develUpgrade openldap-debuginfoUpgrade openldap-clientsUpgrade openldap-servers-sqlUpgrade openldap | Feb 23, 2022 | May 18, 2021 |
| Suse | — | Upgrade openldap2-develUpgrade openldap2-client-openssl1Upgrade openldap2-openssl1Upgrade libldap-openssl1-2_4-2-x86Upgrade libldap-openssl1-2_4-2Upgrade openldap2-back-perlUpgrade libldap-2_4-2Upgrade openldap2-clientUpgrade libldap-openssl1-2_4-2-32bitUpgrade openldap2-devel-staticUpgrade openldap2-ppolicy-check-passwordUpgrade openldap2-back-sqlUpgrade compat-libldap-2_3-0Upgrade openldap2-back-metaUpgrade openldap2-back-sockUpgrade openldap2-devel-32bitUpgrade libldap-dataUpgrade libldap-2_4-2-32bitUpgrade openldap2-contribUpgrade openldap2Upgrade openldap2-doc | Jan 15, 2021 | Nov 17, 2020 |
| Ubuntu | — | Upgrade slapd (Ubuntu Pro)Upgrade slapd | Nov 18, 2020 | Nov 17, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub