A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openldap | May 28, 2021 | May 28, 2021 |
| Amazon Linux Ami 2 | — | Upgrade openldap-clientsUpgrade openldap-servers-sqlUpgrade openldap-debuginfoUpgrade openldap-serversUpgrade openldapUpgrade openldap-devel | Jul 4, 2022 | May 28, 2021 |
| Centos_linux | — | Upgrade openldap-clientsUpgrade openldap-debuginfoUpgrade openldap-serversUpgrade openldapUpgrade openldap-servers-sqlUpgrade openldap-devel | Feb 23, 2022 | May 28, 2021 |
| Debian | — | Upgrade openldap | Nov 19, 2020 | Nov 19, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openldapUpgrade openldap-serversUpgrade openldap-clientsUpgrade openldap-devel | Sep 16, 2021 | May 28, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openldapUpgrade openldap-serversUpgrade openldap-clientsUpgrade openldap-devel | Oct 26, 2021 | May 28, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openldap-develUpgrade openldap-serversUpgrade openldap-clientsUpgrade openldap | Sep 7, 2021 | May 28, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openldap-clientsUpgrade openldap-serversUpgrade openldapUpgrade openldap-devel | Aug 10, 2021 | May 28, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade openldap-clientsUpgrade openldapUpgrade openldap-servers | Aug 10, 2021 | May 28, 2021 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Jan 24, 2023 |
| Oracle_linux | — | Upgrade openldap-servers-sqlUpgrade openldap-develUpgrade openldap-clientsUpgrade openldap-serversUpgrade openldap | Feb 23, 2022 | Nov 2, 2020 |
| Redhat_linux | — | Upgrade openldap-servers-sqlUpgrade openldap-clientsUpgrade openldapUpgrade openldap-debuginfoUpgrade openldap-develUpgrade openldap-serversNo solution exists | Feb 23, 2022 | May 28, 2021 |
| Suse | — | Upgrade openldap2-clientUpgrade openldap2Upgrade compat-libldap-2_3-0Upgrade openldap2-openssl1Upgrade libldap-openssl1-2_4-2-32bitUpgrade openldap2-back-sqlUpgrade libldap-openssl1-2_4-2Upgrade openldap2-ppolicy-check-passwordUpgrade libldap-openssl1-2_4-2-x86Upgrade openldap2-back-sockUpgrade libldap-2_4-2Upgrade openldap2-contribUpgrade openldap2-devel-staticUpgrade openldap2-devel-32bitUpgrade openldap2-back-metaUpgrade openldap2-docUpgrade openldap2-client-openssl1Upgrade openldap2-back-perlUpgrade openldap2-develUpgrade libldap-2_4-2-32bitUpgrade libldap-data | Jan 15, 2021 | Nov 17, 2020 |
| Ubuntu | — | Upgrade slapd (Ubuntu Pro)Upgrade slapd | Nov 18, 2020 | Nov 17, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub