A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-openldap | Mar 26, 2024 | Jan 25, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-openldapamazon-linux-ami-2-upgrade-openldap-clientsamazon-linux-ami-2-upgrade-openldap-debuginfoamazon-linux-ami-2-upgrade-openldap-develamazon-linux-ami-2-upgrade-openldap-serversamazon-linux-ami-2-upgrade-openldap-servers-sql | May 3, 2023 | Jan 26, 2021 | |
| Amazon_linux | — | amazon-linux-upgrade-openldap | May 4, 2023 | Jan 26, 2021 |
| Apple Osx Openldap | apple-osx-security-update-2021-003-catalinaapple-osx-security-update-2021-004-mojaveapple-osx-upgrade-latest | Aug 23, 2021 | Jan 26, 2021 | |
| Debian | debian-upgrade-openldap | Feb 4, 2021 | Jan 26, 2021 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-openldaphuawei-euleros-2_0_sp2-upgrade-openldap-clientshuawei-euleros-2_0_sp2-upgrade-openldap-develhuawei-euleros-2_0_sp2-upgrade-openldap-servers | Sep 16, 2021 | Jan 26, 2021 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-openldaphuawei-euleros-2_0_sp3-upgrade-openldap-clientshuawei-euleros-2_0_sp3-upgrade-openldap-develhuawei-euleros-2_0_sp3-upgrade-openldap-servers | Apr 30, 2021 | Jan 26, 2021 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-compat-openldap | May 19, 2021 | Jan 26, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-openldaphuawei-euleros-2_0_sp8-upgrade-openldap-clientshuawei-euleros-2_0_sp8-upgrade-openldap-develhuawei-euleros-2_0_sp8-upgrade-openldap-servers | May 18, 2021 | Jan 26, 2021 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-openldaphuawei-euleros-2_0_sp9-upgrade-openldap-clientshuawei-euleros-2_0_sp9-upgrade-openldap-servers | Feb 8, 2021 | Jan 26, 2021 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-service-network-ldap-openldap-2-4-57-0-0-11-4-31-0-1-88-1oracle-solaris-11-4-upgrade-system-network-ldap-openldap-2-4-57-0-0-11-4-31-0-1-88-1 | Mar 17, 2021 | Jan 26, 2021 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Jan 26, 2021 | |
| Suse | — | suse-upgrade-compat-libldap-2_3-0suse-upgrade-libldap-2_4-2suse-upgrade-libldap-2_4-2-32bitsuse-upgrade-libldap-datasuse-upgrade-libldap-openssl1-2_4-2suse-upgrade-libldap-openssl1-2_4-2-32bitsuse-upgrade-libldap-openssl1-2_4-2-x86suse-upgrade-openldap2suse-upgrade-openldap2-back-metasuse-upgrade-openldap2-back-perlsuse-upgrade-openldap2-back-socksuse-upgrade-openldap2-back-sqlsuse-upgrade-openldap2-clientsuse-upgrade-openldap2-client-openssl1suse-upgrade-openldap2-contribsuse-upgrade-openldap2-develsuse-upgrade-openldap2-devel-32bitsuse-upgrade-openldap2-devel-staticsuse-upgrade-openldap2-docsuse-upgrade-openldap2-openssl1suse-upgrade-openldap2-ppolicy-check-password | Mar 4, 2021 | Jan 26, 2021 |
| Ubuntu | ubuntu-pro-upgrade-slapdubuntu-upgrade-slapd | Feb 9, 2021 | Jan 26, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jan 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub