Rapid7

vulnerability

Red Hat: CVE-2021-27212: openldap: Assertion failure in slapd in the issuerAndThisUpdateCheck function

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
Feb 14, 2021
Added
Jul 9, 2025
Modified
Jul 9, 2025

Description

In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.

Solution

no-fix-redhat-rpm-package
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.