Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2021-46823
HistoryJun 18, 2022 - 4:15 p.m.

CVE-2021-46823

2022-06-1816:15:08
CWE-1333
[email protected]
web.nvd.nist.gov
6
python-ldap
denial of service
ldap schema parser
cve-2021-46823

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

50.3%

JSON

python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regular expression denial of service (ReDoS) flaw in the LDAP schema parser. By sending crafted regex input, a remote authenticated attacker could exploit this vulnerability to cause a denial of service condition.

Affected configurations

Nvd
Node
python-ldappython-ldapRange<3.4.0
VendorProductVersionCPE
python-ldappython-ldap*cpe:2.3:a:python-ldap:python-ldap:*:*:*:*:*:*:*:*

Related

openvas 10
nessus 14
osv 4
cve 1
debiancve 1
veracode 1
redhatcve 1
cvelist 1
cbl_mariner 1
ubuntucve 1
ubuntu 1
prion 1
mageia 1
github 1
amazon 1
openvas
openvas
Huawei EulerOS: Security Advisory for python-ldap (EulerOS-SA-2022-2739)
2022-11-14 00:00:00
Huawei EulerOS: Security Advisory for python-ldap (EulerOS-SA-2023-1230)
2023-01-12 00:00:00
Huawei EulerOS: Security Advisory for python-ldap (EulerOS-SA-2022-2940)
2022-12-30 00:00:00
nessus
nessus
EulerOS 2.0 SP10 : python-ldap (EulerOS-SA-2022-2694)
2022-11-02 00:00:00
EulerOS Virtualization 2.9.1 : python-ldap (EulerOS-SA-2023-1200)
2023-01-10 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Python LDAP vulnerability (USN-5508-1)
2022-07-11 00:00:00
osv
osv
ReDoS in LDAP schema parser
2021-11-29 17:58:59
CVE-2021-46823
2022-06-18 16:15:08
python-ldap vulnerability
2022-07-11 14:09:05
cve
cve
CVE-2021-46823
2022-06-18 16:15:08
debiancve
debiancve
CVE-2021-46823
2022-06-18 16:15:08
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2022-06-20 10:45:46
redhatcve
redhatcve
CVE-2021-46823
2022-06-20 15:59:30
cvelist
cvelist
CVE-2021-46823
2022-06-18 15:27:17
cbl_mariner
cbl_mariner
CVE-2021-46823 affecting package python-ldap for versions less than 3.4.0-1
2023-09-28 12:35:58
ubuntucve
ubuntucve
CVE-2021-46823
2022-06-18 00:00:00
ubuntu
ubuntu
Python LDAP vulnerability
2022-07-11 00:00:00
prion
prion
Race condition
2022-06-18 16:15:00
mageia
mageia
Updated python-ldap packages fix security vulnerability
2022-08-29 08:07:41
github
github
Denial of Service in python-ldap
2022-06-19 00:00:21
amazon
amazon
Medium: python-ldap
2024-01-03 21:04:00

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

50.3%

JSON
Related for NVD:CVE-2021-46823
openvas10nessus14osv4cve1debiancve1veracode1redhatcve1cvelist1cbl_mariner1ubuntucve1ubuntu1prion1mageia1github1amazon1