A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openldap | May 18, 2021 | May 18, 2021 |
| Amazon Linux Ami 2 | — | Upgrade openldap-servers-sqlUpgrade openldap-serversUpgrade openldap-debuginfoUpgrade openldap-clientsUpgrade openldap-develUpgrade openldap | Jul 4, 2022 | May 18, 2021 |
| Apple Osx Openldap | — | Upgrade macOS to the latest versionApply OS X security update 2021-001 MojaveApply OS X security update 2021-001 Catalina | Feb 19, 2021 | Feb 19, 2021 |
| Centos_linux | — | Upgrade openldap-develUpgrade openldap-clientsUpgrade openldap-serversUpgrade openldap-servers-sqlUpgrade openldap-debuginfoUpgrade openldap | Feb 23, 2022 | May 18, 2021 |
| Debian | — | Upgrade openldap | Nov 19, 2020 | Nov 19, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openldap-clientsUpgrade openldap-develUpgrade openldap-serversUpgrade openldap | Sep 16, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openldapUpgrade openldap-develUpgrade openldap-clientsUpgrade openldap-servers | Oct 26, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openldap-clientsUpgrade openldapUpgrade openldap-develUpgrade openldap-servers | Sep 7, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openldap-develUpgrade openldap-serversUpgrade openldapUpgrade openldap-clients | Aug 10, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade openldap-serversUpgrade openldapUpgrade openldap-clients | Aug 10, 2021 | May 18, 2021 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Jan 24, 2023 |
| Oracle_linux | — | Upgrade openldapUpgrade openldap-servers-sqlUpgrade openldap-clientsUpgrade openldap-develUpgrade openldap-servers | Feb 23, 2022 | Nov 2, 2020 |
| Redhat_linux | — | Upgrade openldap-servers-sqlUpgrade openldapUpgrade openldap-clientsUpgrade openldap-develUpgrade openldap-debuginfoNo solution existsUpgrade openldap-servers | Feb 23, 2022 | May 18, 2021 |
| Suse | — | Upgrade openldap2Upgrade openldap2-contribUpgrade openldap2-devel-32bitUpgrade openldap2-docUpgrade libldap-2_4-2-32bitUpgrade libldap-dataUpgrade compat-libldap-2_3-0Upgrade openldap2-back-sockUpgrade libldap-openssl1-2_4-2Upgrade openldap2-client-openssl1Upgrade openldap2-clientUpgrade openldap2-back-metaUpgrade openldap2-ppolicy-check-passwordUpgrade libldap-openssl1-2_4-2-32bitUpgrade openldap2-openssl1Upgrade openldap2-develUpgrade openldap2-devel-staticUpgrade openldap2-back-perlUpgrade libldap-openssl1-2_4-2-x86Upgrade openldap2-back-sqlUpgrade libldap-2_4-2 | Jan 15, 2021 | Nov 17, 2020 |
| Ubuntu | — | Upgrade slapdUpgrade slapd (Ubuntu Pro) | Nov 18, 2020 | Nov 17, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub