Published: 18/06/2022 Updated: 08/08/2023

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P

python-ldap prior to 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regular expression denial of service (ReDoS) flaw in the LDAP schema parser. By sending crafted regex input, a remote authenticated attacker could exploit this vulnerability to cause a denial of service condition.

Vulnerable Product	Search on Vulmon	Subscribe to Product
python-ldap python-ldap

python-ldap before 340 is vulnerable to a denial of service when ldapschema is used for untrusted schema definitions, because of a regular expression denial of service (ReDoS) flaw in the LDAP schema parser By sending crafted regex input, a remote authenticated attacker could exploit this vulnerability to cause a denial of service condition (C ...

CWE-1333 https://github.com/python-ldap/python-ldap/security/advisories/GHSA-r8wq-qrxc-hmcm https://exchange.xforce.ibmcloud.com/vulnerabilities/221507 https://nvd.nist.gov https://alas.aws.amazon.com/AL2/ALAS-2024-2406.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2021-46823

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect