A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openldap | May 18, 2021 | May 18, 2021 |
| Amazon Linux Ami 2 | — | Upgrade openldap-clientsUpgrade openldap-develUpgrade openldapUpgrade openldap-debuginfoUpgrade openldap-serversUpgrade openldap-servers-sql | Jul 4, 2022 | May 18, 2021 |
| Apple Osx Openldap | — | Apply OS X security update 2021-001 MojaveApply OS X security update 2021-001 CatalinaUpgrade macOS to the latest version | Feb 19, 2021 | Feb 19, 2021 |
| Centos_linux | — | Upgrade openldap-develUpgrade openldap-debuginfoUpgrade openldap-serversUpgrade openldap-clientsUpgrade openldapUpgrade openldap-servers-sql | Feb 23, 2022 | May 18, 2021 |
| Debian | — | Upgrade openldap | Nov 19, 2020 | Nov 19, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openldap-serversUpgrade openldap-clientsUpgrade openldap-develUpgrade openldap | Sep 16, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openldapUpgrade openldap-clientsUpgrade openldap-develUpgrade openldap-servers | Oct 26, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openldapUpgrade openldap-serversUpgrade openldap-develUpgrade openldap-clients | Sep 7, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openldap-clientsUpgrade openldap-develUpgrade openldap-serversUpgrade openldap | Aug 10, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade openldap-serversUpgrade openldapUpgrade openldap-clients | Aug 10, 2021 | May 18, 2021 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Jan 24, 2023 |
| Oracle_linux | — | Upgrade openldapUpgrade openldap-servers-sqlUpgrade openldap-serversUpgrade openldap-develUpgrade openldap-clients | Feb 23, 2022 | Nov 2, 2020 |
| Redhat_linux | — | No solution existsUpgrade openldap-serversUpgrade openldap-develUpgrade openldap-clientsUpgrade openldap-debuginfoUpgrade openldap-servers-sqlUpgrade openldap | Feb 23, 2022 | May 18, 2021 |
| Suse | — | Upgrade openldap2-back-perlUpgrade openldap2-back-metaUpgrade openldap2-back-sockUpgrade libldap-openssl1-2_4-2Upgrade openldap2-clientUpgrade openldap2-develUpgrade openldap2-devel-staticUpgrade openldap2-client-openssl1Upgrade libldap-2_4-2Upgrade openldap2-openssl1Upgrade libldap-openssl1-2_4-2-x86Upgrade openldap2-back-sqlUpgrade compat-libldap-2_3-0Upgrade openldap2-ppolicy-check-passwordUpgrade libldap-openssl1-2_4-2-32bitUpgrade libldap-2_4-2-32bitUpgrade libldap-dataUpgrade openldap2-devel-32bitUpgrade openldap2-contribUpgrade openldap2Upgrade openldap2-doc | Jan 15, 2021 | Nov 17, 2020 |
| Ubuntu | — | Upgrade slapdUpgrade slapd (Ubuntu Pro) | Nov 18, 2020 | Nov 17, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub