A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openldap | May 18, 2021 | May 18, 2021 |
| Amazon Linux Ami 2 | — | Upgrade openldapUpgrade openldap-clientsUpgrade openldap-develUpgrade openldap-debuginfoUpgrade openldap-servers-sqlUpgrade openldap-servers | Jul 4, 2022 | May 18, 2021 |
| Apple Osx Openldap | — | Upgrade macOS to the latest versionApply OS X security update 2021-001 CatalinaApply OS X security update 2021-001 Mojave | Feb 19, 2021 | Feb 19, 2021 |
| Centos_linux | — | Upgrade openldap-develUpgrade openldapUpgrade openldap-serversUpgrade openldap-debuginfoUpgrade openldap-servers-sqlUpgrade openldap-clients | Feb 23, 2022 | May 18, 2021 |
| Debian | — | Upgrade openldap | Nov 19, 2020 | Nov 19, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openldapUpgrade openldap-serversUpgrade openldap-develUpgrade openldap-clients | Sep 16, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openldapUpgrade openldap-clientsUpgrade openldap-develUpgrade openldap-servers | Oct 26, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openldap-serversUpgrade openldap-develUpgrade openldapUpgrade openldap-clients | Sep 7, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openldap-serversUpgrade openldapUpgrade openldap-develUpgrade openldap-clients | Aug 10, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade openldapUpgrade openldap-serversUpgrade openldap-clients | Aug 10, 2021 | May 18, 2021 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Jan 24, 2023 |
| Oracle_linux | — | Upgrade openldap-develUpgrade openldap-serversUpgrade openldap-clientsUpgrade openldap-servers-sqlUpgrade openldap | Feb 23, 2022 | Nov 2, 2020 |
| Redhat_linux | — | Upgrade openldap-servers-sqlUpgrade openldap-clientsUpgrade openldap-debuginfoUpgrade openldap-develUpgrade openldapNo solution existsUpgrade openldap-servers | Feb 23, 2022 | May 18, 2021 |
| Suse | — | Upgrade openldap2Upgrade libldap-2_4-2-32bitUpgrade openldap2-contribUpgrade openldap2-devel-32bitUpgrade libldap-dataUpgrade openldap2-docUpgrade libldap-2_4-2Upgrade compat-libldap-2_3-0Upgrade libldap-openssl1-2_4-2-x86Upgrade openldap2-devel-staticUpgrade openldap2-clientUpgrade libldap-openssl1-2_4-2Upgrade openldap2-back-perlUpgrade openldap2-ppolicy-check-passwordUpgrade libldap-openssl1-2_4-2-32bitUpgrade openldap2-back-metaUpgrade openldap2-back-sqlUpgrade openldap2-develUpgrade openldap2-back-sockUpgrade openldap2-client-openssl1Upgrade openldap2-openssl1 | Jan 15, 2021 | Nov 17, 2020 |
| Ubuntu | — | Upgrade slapdUpgrade slapd (Ubuntu Pro) | Nov 18, 2020 | Nov 17, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub