CVE-2021-27212

Katalog CVE

CVSS 7.5 · High EPSS 63,3%

Kerentanan Reachable Assertion pada openldap, debian linux. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.

Rincian

Terbit di NVD

14 Februari 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-617: Reachable Assertion

EPSS (30 hari)

63,3% peluang dieksploitasi; lebih tinggi dari 99,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugs.openldap.org/show_bug.cgi?id=9454 exploit · issue tracking · advisory vendor
• https://git.openldap.org/openldap/openldap/-/commit/3539fc33212b528c56b716584f2c2994af7c30b0 patch · advisory vendor
• https://git.openldap.org/openldap/openldap/-/commit/9badb73425a67768c09bcaed1a9c26c684af6c30 patch · advisory vendor
• https://lists.debian.org/debian-lts-announce/2021/02/msg00035.html mailing list · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20210319-0005/ advisory pihak ketiga
• https://www.debian.org/security/2021/dsa-4860 advisory pihak ketiga
• https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.boo...
• https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.boo...