A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openldap | May 28, 2021 | May 28, 2021 |
| Amazon Linux Ami 2 | — | Upgrade openldap-serversUpgrade openldap-debuginfoUpgrade openldap-servers-sqlUpgrade openldap-clientsUpgrade openldap-develUpgrade openldap | Jul 4, 2022 | May 28, 2021 |
| Centos_linux | — | Upgrade openldap-develUpgrade openldap-servers-sqlUpgrade openldapUpgrade openldap-debuginfoUpgrade openldap-serversUpgrade openldap-clients | Feb 23, 2022 | May 28, 2021 |
| Debian | — | Upgrade openldap | Nov 19, 2020 | Nov 19, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openldap-clientsUpgrade openldap-serversUpgrade openldapUpgrade openldap-devel | Sep 16, 2021 | May 28, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openldap-clientsUpgrade openldap-serversUpgrade openldap-develUpgrade openldap | Oct 26, 2021 | May 28, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openldap-develUpgrade openldapUpgrade openldap-clientsUpgrade openldap-servers | Sep 7, 2021 | May 28, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openldap-develUpgrade openldap-serversUpgrade openldapUpgrade openldap-clients | Aug 10, 2021 | May 28, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade openldap-serversUpgrade openldapUpgrade openldap-clients | Aug 10, 2021 | May 28, 2021 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Jan 24, 2023 |
| Oracle_linux | — | Upgrade openldap-servers-sqlUpgrade openldap-clientsUpgrade openldap-develUpgrade openldapUpgrade openldap-servers | Feb 23, 2022 | Nov 2, 2020 |
| Redhat_linux | — | Upgrade openldapUpgrade openldap-servers-sqlUpgrade openldap-develUpgrade openldap-clientsUpgrade openldap-debuginfoUpgrade openldap-serversNo solution exists | Feb 23, 2022 | May 28, 2021 |
| Suse | — | Upgrade openldap2-openssl1Upgrade openldap2-clientUpgrade openldap2Upgrade libldap-openssl1-2_4-2-x86Upgrade libldap-openssl1-2_4-2Upgrade openldap2-ppolicy-check-passwordUpgrade libldap-2_4-2Upgrade openldap2-back-sqlUpgrade compat-libldap-2_3-0Upgrade libldap-openssl1-2_4-2-32bitUpgrade openldap2-back-sockUpgrade openldap2-contribUpgrade libldap-dataUpgrade openldap2-client-openssl1Upgrade openldap2-docUpgrade openldap2-develUpgrade libldap-2_4-2-32bitUpgrade openldap2-devel-staticUpgrade openldap2-back-metaUpgrade openldap2-devel-32bitUpgrade openldap2-back-perl | Jan 15, 2021 | Nov 17, 2020 |
| Ubuntu | — | Upgrade slapdUpgrade slapd (Ubuntu Pro) | Nov 18, 2020 | Nov 17, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub