In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-openldap | Mar 26, 2024 | Feb 14, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-openldapamazon-linux-ami-2-upgrade-openldap-clientsamazon-linux-ami-2-upgrade-openldap-debuginfoamazon-linux-ami-2-upgrade-openldap-develamazon-linux-ami-2-upgrade-openldap-serversamazon-linux-ami-2-upgrade-openldap-servers-sql | May 3, 2023 | Feb 14, 2021 | |
| Amazon_linux | — | amazon-linux-upgrade-openldap | May 4, 2023 | Feb 14, 2021 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-openldapamazon-linux-2023-upgrade-openldap-clientsamazon-linux-2023-upgrade-openldap-clients-debuginfoamazon-linux-2023-upgrade-openldap-compatamazon-linux-2023-upgrade-openldap-compat-debuginfoamazon-linux-2023-upgrade-openldap-debuginfoamazon-linux-2023-upgrade-openldap-debugsourceamazon-linux-2023-upgrade-openldap-develamazon-linux-2023-upgrade-openldap-serversamazon-linux-2023-upgrade-openldap-servers-debuginfo | Feb 17, 2025 | Feb 14, 2021 | |
| Debian | debian-upgrade-openldap | Feb 22, 2021 | Feb 14, 2021 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-openldaphuawei-euleros-2_0_sp2-upgrade-openldap-clientshuawei-euleros-2_0_sp2-upgrade-openldap-develhuawei-euleros-2_0_sp2-upgrade-openldap-servers | Sep 16, 2021 | Feb 14, 2021 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-openldaphuawei-euleros-2_0_sp3-upgrade-openldap-clientshuawei-euleros-2_0_sp3-upgrade-openldap-develhuawei-euleros-2_0_sp3-upgrade-openldap-servers | Apr 30, 2021 | Feb 14, 2021 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-openldaphuawei-euleros-2_0_sp5-upgrade-openldap-clientshuawei-euleros-2_0_sp5-upgrade-openldap-develhuawei-euleros-2_0_sp5-upgrade-openldap-servers | May 19, 2021 | Feb 14, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-openldaphuawei-euleros-2_0_sp8-upgrade-openldap-clientshuawei-euleros-2_0_sp8-upgrade-openldap-develhuawei-euleros-2_0_sp8-upgrade-openldap-servers | May 18, 2021 | Feb 14, 2021 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-openldaphuawei-euleros-2_0_sp9-upgrade-openldap-clientshuawei-euleros-2_0_sp9-upgrade-openldap-servers | Jun 2, 2021 | Feb 14, 2021 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-service-network-ldap-openldap-2-4-57-0-1-11-4-32-0-1-88-1oracle-solaris-11-4-upgrade-system-network-ldap-openldap-2-4-57-0-1-11-4-32-0-1-88-1 | Apr 21, 2021 | Feb 14, 2021 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Feb 14, 2021 | |
| Suse | — | suse-upgrade-compat-libldap-2_3-0suse-upgrade-libldap-2_4-2suse-upgrade-libldap-2_4-2-32bitsuse-upgrade-libldap-datasuse-upgrade-libldap-openssl1-2_4-2suse-upgrade-libldap-openssl1-2_4-2-32bitsuse-upgrade-libldap-openssl1-2_4-2-x86suse-upgrade-openldap2suse-upgrade-openldap2-back-metasuse-upgrade-openldap2-back-perlsuse-upgrade-openldap2-back-socksuse-upgrade-openldap2-back-sqlsuse-upgrade-openldap2-clientsuse-upgrade-openldap2-client-openssl1suse-upgrade-openldap2-contribsuse-upgrade-openldap2-develsuse-upgrade-openldap2-devel-32bitsuse-upgrade-openldap2-devel-staticsuse-upgrade-openldap2-docsuse-upgrade-openldap2-openssl1suse-upgrade-openldap2-ppolicy-check-password | Mar 4, 2021 | Feb 14, 2021 |
| Ubuntu | ubuntu-pro-upgrade-slapdubuntu-upgrade-slapd | Feb 23, 2021 | Feb 14, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Feb 14, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub