A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openldap | May 28, 2021 | May 28, 2021 |
| Amazon Linux Ami 2 | — | Upgrade openldap-servers-sqlUpgrade openldap-debuginfoUpgrade openldap-serversUpgrade openldap-clientsUpgrade openldapUpgrade openldap-devel | Jul 4, 2022 | May 28, 2021 |
| Centos_linux | — | Upgrade openldap-develUpgrade openldap-servers-sqlUpgrade openldapUpgrade openldap-serversUpgrade openldap-clientsUpgrade openldap-debuginfo | Feb 23, 2022 | May 28, 2021 |
| Debian | — | Upgrade openldap | Nov 19, 2020 | Nov 19, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openldap-develUpgrade openldap-clientsUpgrade openldapUpgrade openldap-servers | Sep 16, 2021 | May 28, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openldapUpgrade openldap-clientsUpgrade openldap-develUpgrade openldap-servers | Oct 26, 2021 | May 28, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openldap-develUpgrade openldapUpgrade openldap-clientsUpgrade openldap-servers | Sep 7, 2021 | May 28, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openldap-serversUpgrade openldapUpgrade openldap-develUpgrade openldap-clients | Aug 10, 2021 | May 28, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade openldapUpgrade openldap-clientsUpgrade openldap-servers | Aug 10, 2021 | May 28, 2021 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Jan 24, 2023 |
| Oracle_linux | — | Upgrade openldap-servers-sqlUpgrade openldap-develUpgrade openldap-clientsUpgrade openldap-serversUpgrade openldap | Feb 23, 2022 | Nov 2, 2020 |
| Redhat_linux | — | No solution existsUpgrade openldap-serversUpgrade openldap-debuginfoUpgrade openldap-servers-sqlUpgrade openldapUpgrade openldap-clientsUpgrade openldap-devel | Feb 23, 2022 | May 28, 2021 |
| Suse | — | Upgrade libldap-2_4-2-32bitUpgrade openldap2-docUpgrade openldap2-develUpgrade libldap-dataUpgrade openldap2-back-metaUpgrade openldap2-devel-32bitUpgrade openldap2-client-openssl1Upgrade openldap2-back-perlUpgrade openldap2-devel-staticUpgrade openldap2-ppolicy-check-passwordUpgrade libldap-openssl1-2_4-2-32bitUpgrade libldap-openssl1-2_4-2Upgrade openldap2-contribUpgrade openldap2-back-sqlUpgrade openldap2-clientUpgrade libldap-openssl1-2_4-2-x86Upgrade openldap2Upgrade libldap-2_4-2Upgrade openldap2-back-sockUpgrade compat-libldap-2_3-0Upgrade openldap2-openssl1 | Jan 15, 2021 | Nov 17, 2020 |
| Ubuntu | — | Upgrade slapdUpgrade slapd (Ubuntu Pro) | Nov 18, 2020 | Nov 17, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub