A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openldap | May 28, 2021 | May 28, 2021 |
| Amazon Linux Ami 2 | — | Upgrade openldap-develUpgrade openldapUpgrade openldap-debuginfoUpgrade openldap-clientsUpgrade openldap-servers-sqlUpgrade openldap-servers | Jul 4, 2022 | May 28, 2021 |
| Centos_linux | — | Upgrade openldapUpgrade openldap-servers-sqlUpgrade openldap-develUpgrade openldap-serversUpgrade openldap-debuginfoUpgrade openldap-clients | Feb 23, 2022 | May 28, 2021 |
| Debian | — | Upgrade openldap | Nov 19, 2020 | Nov 19, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openldap-develUpgrade openldap-serversUpgrade openldapUpgrade openldap-clients | Sep 16, 2021 | May 28, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openldapUpgrade openldap-develUpgrade openldap-serversUpgrade openldap-clients | Oct 26, 2021 | May 28, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openldap-develUpgrade openldap-clientsUpgrade openldapUpgrade openldap-servers | Sep 7, 2021 | May 28, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openldapUpgrade openldap-serversUpgrade openldap-develUpgrade openldap-clients | Aug 10, 2021 | May 28, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade openldap-clientsUpgrade openldap-serversUpgrade openldap | Aug 10, 2021 | May 28, 2021 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Jan 24, 2023 |
| Oracle_linux | — | Upgrade openldapUpgrade openldap-serversUpgrade openldap-clientsUpgrade openldap-servers-sqlUpgrade openldap-devel | Feb 23, 2022 | Nov 2, 2020 |
| Redhat_linux | — | Upgrade openldap-serversNo solution existsUpgrade openldap-clientsUpgrade openldap-debuginfoUpgrade openldap-develUpgrade openldap-servers-sqlUpgrade openldap | Feb 23, 2022 | May 28, 2021 |
| Suse | — | Upgrade libldap-openssl1-2_4-2-x86Upgrade libldap-openssl1-2_4-2Upgrade libldap-openssl1-2_4-2-32bitUpgrade openldap2-ppolicy-check-passwordUpgrade openldap2Upgrade openldap2-openssl1Upgrade compat-libldap-2_3-0Upgrade openldap2-back-sqlUpgrade openldap2-contribUpgrade libldap-2_4-2Upgrade openldap2-back-sockUpgrade openldap2-clientUpgrade openldap2-docUpgrade openldap2-devel-staticUpgrade openldap2-back-perlUpgrade libldap-dataUpgrade openldap2-client-openssl1Upgrade openldap2-back-metaUpgrade openldap2-develUpgrade libldap-2_4-2-32bitUpgrade openldap2-devel-32bit | Jan 15, 2021 | Nov 17, 2020 |
| Ubuntu | — | Upgrade slapdUpgrade slapd (Ubuntu Pro) | Nov 18, 2020 | Nov 17, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub