A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openldap | May 18, 2021 | May 18, 2021 |
| Amazon Linux Ami 2 | — | Upgrade openldap-servers-sqlUpgrade openldap-debuginfoUpgrade openldap-serversUpgrade openldapUpgrade openldap-clientsUpgrade openldap-devel | Jul 4, 2022 | May 18, 2021 |
| Apple Osx Openldap | — | Apply OS X security update 2021-001 MojaveApply OS X security update 2021-001 CatalinaUpgrade macOS to the latest version | Feb 19, 2021 | Feb 19, 2021 |
| Centos_linux | — | Upgrade openldap-develUpgrade openldap-serversUpgrade openldapUpgrade openldap-servers-sqlUpgrade openldap-debuginfoUpgrade openldap-clients | Feb 23, 2022 | May 18, 2021 |
| Debian | — | Upgrade openldap | Nov 19, 2020 | Nov 19, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openldap-serversUpgrade openldap-develUpgrade openldap-clientsUpgrade openldap | Sep 16, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openldap-serversUpgrade openldap-develUpgrade openldap-clientsUpgrade openldap | Oct 26, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openldapUpgrade openldap-serversUpgrade openldap-develUpgrade openldap-clients | Sep 7, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openldap-clientsUpgrade openldap-develUpgrade openldap-serversUpgrade openldap | Aug 10, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade openldap-clientsUpgrade openldap-serversUpgrade openldap | Aug 10, 2021 | May 18, 2021 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Jan 24, 2023 |
| Oracle_linux | — | Upgrade openldap-serversUpgrade openldap-develUpgrade openldap-clientsUpgrade openldap-servers-sqlUpgrade openldap | Feb 23, 2022 | Nov 2, 2020 |
| Redhat_linux | — | Upgrade openldap-debuginfoUpgrade openldapUpgrade openldap-develUpgrade openldap-servers-sqlUpgrade openldap-clientsNo solution existsUpgrade openldap-servers | Feb 23, 2022 | May 18, 2021 |
| Suse | — | Upgrade libldap-dataUpgrade openldap2-devel-32bitUpgrade openldap2-docUpgrade libldap-2_4-2-32bitUpgrade openldap2Upgrade openldap2-contribUpgrade openldap2-devel-staticUpgrade libldap-openssl1-2_4-2-x86Upgrade openldap2-back-metaUpgrade openldap2-back-sqlUpgrade libldap-openssl1-2_4-2Upgrade openldap2-back-perlUpgrade openldap2-back-sockUpgrade openldap2-client-openssl1Upgrade libldap-2_4-2Upgrade openldap2-openssl1Upgrade openldap2-ppolicy-check-passwordUpgrade libldap-openssl1-2_4-2-32bitUpgrade openldap2-clientUpgrade compat-libldap-2_3-0Upgrade openldap2-devel | Jan 15, 2021 | Nov 17, 2020 |
| Ubuntu | — | Upgrade slapdUpgrade slapd (Ubuntu Pro) | Nov 18, 2020 | Nov 17, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub