A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openldap | May 28, 2021 | May 28, 2021 |
| Amazon Linux Ami 2 | — | Upgrade openldapUpgrade openldap-develUpgrade openldap-debuginfoUpgrade openldap-serversUpgrade openldap-servers-sqlUpgrade openldap-clients | Jul 4, 2022 | May 28, 2021 |
| Centos_linux | — | Upgrade openldap-serversUpgrade openldap-debuginfoUpgrade openldap-clientsUpgrade openldapUpgrade openldap-develUpgrade openldap-servers-sql | Feb 23, 2022 | May 28, 2021 |
| Debian | — | Upgrade openldap | Nov 19, 2020 | Nov 19, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openldap-serversUpgrade openldap-clientsUpgrade openldapUpgrade openldap-devel | Sep 16, 2021 | May 28, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openldapUpgrade openldap-develUpgrade openldap-clientsUpgrade openldap-servers | Oct 26, 2021 | May 28, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openldap-develUpgrade openldap-clientsUpgrade openldapUpgrade openldap-servers | Sep 7, 2021 | May 28, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openldap-clientsUpgrade openldapUpgrade openldap-serversUpgrade openldap-devel | Aug 10, 2021 | May 28, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade openldap-serversUpgrade openldap-clientsUpgrade openldap | Aug 10, 2021 | May 28, 2021 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Jan 24, 2023 |
| Oracle_linux | — | Upgrade openldap-develUpgrade openldap-clientsUpgrade openldap-servers-sqlUpgrade openldapUpgrade openldap-servers | Feb 23, 2022 | Nov 2, 2020 |
| Redhat_linux | — | Upgrade openldap-serversNo solution existsUpgrade openldap-servers-sqlUpgrade openldap-clientsUpgrade openldap-develUpgrade openldapUpgrade openldap-debuginfo | Feb 23, 2022 | May 28, 2021 |
| Suse | — | Upgrade openldap2-back-metaUpgrade openldap2-docUpgrade openldap2-devel-32bitUpgrade libldap-2_4-2-32bitUpgrade openldap2-develUpgrade openldap2-devel-staticUpgrade openldap2-back-perlUpgrade libldap-dataUpgrade openldap2-client-openssl1Upgrade openldap2-openssl1Upgrade libldap-openssl1-2_4-2-x86Upgrade openldap2-back-sqlUpgrade openldap2-clientUpgrade openldap2Upgrade libldap-openssl1-2_4-2-32bitUpgrade openldap2-contribUpgrade libldap-2_4-2Upgrade openldap2-back-sockUpgrade compat-libldap-2_3-0Upgrade libldap-openssl1-2_4-2Upgrade openldap2-ppolicy-check-password | Jan 15, 2021 | Nov 17, 2020 |
| Ubuntu | — | Upgrade slapdUpgrade slapd (Ubuntu Pro) | Nov 18, 2020 | Nov 17, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub