14388 matches found
OPENSUSE-SU-2025:15637-1 python311-ldap-3.4.5-1.1 on GA media
These are all security issues fixed in the python311-ldap-3.4.5-1.1 package on the GA media of openSUSE Tumbleweed...
Linux Distros Unpatched Vulnerability : CVE-2025-61912
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat Enterprise Linux - python-ldap: python-ldap Vulnerable to Improper Encoding or Escaping of Output and Improper Null Termination CVE-2025-61912 Note that...
SUSE CVE-2025-61911
python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5, the sanitization method ldap.filter.escapefilterchars can be tricked to skip escaping of special characters when a crafted list or dict is supplied as the assertionvalue parameter, and t...
SUSE CVE-2025-61912
python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5, ldap.dn.escapednchars escapes \x00 incorrectly by emitting a backslash followed by a literal NUL byte instead of the RFC-4514 hex form \00. Any application that uses this helper to...
GHSA-P34H-WQ7J-H5V6 python-ldap is Vulnerable to Improper Encoding or Escaping of Output and Improper Null Termination
Summary ldap.dn.escapednchars escapes \x00 incorrectly by emitting a backslash followed by a literal NUL byte instead of the RFC-4514 hex form \00. Any application that uses this helper to construct DNs from untrusted input can be made to consistently fail before a request is sent to the LDAP...
Improper Encoding or Escaping of Output
Overview python-ldap is a Python modules for implementing LDAP clients Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via the escapednchars function. An attacker can cause client-side failures, such as unhandled exceptions or process crashes, by...
anomalydetection (0.0.0.dev1), athiruma-cloud-governance (>=1.1.89, <=1.1.345) +27 more potentially affected by CVE-2025-61912 via python-ldap (>=3.0.0, <=3.4.4)
python-ldap PYPI version =3.0.0, =1.1.89, =3.1.2, =3.7.1, =1.0.426, =2.2.1.dev6, =1.5.3, =0.4.4a3, =1.0.0, =0.0.0, =1.1.0, =3.7.0, =1.0.0, =1.0.18 and more Source cves: CVE-2025-61912 Source advisory: SNYK:PYTHON-PYTHONLDAP-13535054...
anomalydetection (0.0.0.dev1), athiruma-cloud-governance (>=1.1.89, <=1.1.345) +27 more potentially affected by CVE-2025-61912 via python-ldap (>=3.0.0, <=3.4.4)
python-ldap PYPI version =3.0.0, =1.1.89, =3.1.2, =3.7.1, =1.0.426, =2.2.1.dev6, =1.5.3, =0.4.4a3, =1.0.0, =0.0.0, =1.1.0, =3.7.0, =1.0.0, =1.0.18 and more Source cves: CVE-2025-61912 Source advisory: GHSA-P34H-WQ7J-H5V6...
anomalydetection (0.0.0.dev1), athiruma-cloud-governance (>=1.1.89, <=1.1.345) +27 more potentially affected by CVE-2025-61912 via python-ldap (>=3.0.0, <=3.4.4)
python-ldap PYPI version =3.0.0, =1.1.89, =3.1.2, =3.7.1, =1.0.426, =2.2.1.dev6, =1.5.3, =0.4.4a3, =1.0.0, =0.0.0, =1.1.0, =3.7.0, =1.0.0, =1.0.18 and more Source cves: CVE-2025-61912 Source advisory: OSV:GHSA-P34H-WQ7J-H5V6...
anomalydetection (0.0.0.dev1), athiruma-cloud-governance (>=1.1.89, <=1.1.345) +27 more potentially affected by CVE-2025-61911 via python-ldap (>=3.0.0, <=3.4.4)
python-ldap PYPI version =3.0.0, =1.1.89, =3.1.2, =3.7.1, =1.0.426, =2.2.1.dev6, =1.5.3, =0.4.4a3, =1.0.0, =0.0.0, =1.1.0, =3.7.0, =1.0.0, =1.0.18 and more Source cves: CVE-2025-61911 Source advisory: SNYK:PYTHON-PYTHONLDAP-13535079...
python-ldap has sanitization bypass in ldap.filter.escape_filter_chars
Summary The sanitization method ldap.filter.escapefilterchars can be tricked to skip escaping of special characters when a crafted list or dict is supplied as the assertionvalue parameter, and the non-default escapemode=1 is configured. Details The method ldap.filter.escapefilterchars supports 3...
Improper Validation of Specified Type of Input
Overview python-ldap is a Python modules for implementing LDAP clients Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input via the escapefilterchars function. An attacker can bypass input sanitization and potentially manipulate or disclose LDAP data ...
anomalydetection (0.0.0.dev1), athiruma-cloud-governance (>=1.1.89, <=1.1.345) +27 more potentially affected by CVE-2025-61911 via python-ldap (>=3.0.0, <=3.4.4)
python-ldap PYPI version =3.0.0, =1.1.89, =3.1.2, =3.7.1, =1.0.426, =2.2.1.dev6, =1.5.3, =0.4.4a3, =1.0.0, =0.0.0, =1.1.0, =3.7.0, =1.0.0, =1.0.18 and more Source cves: CVE-2025-61911 Source advisory: OSV:GHSA-R7R6-CC7P-4V5M...
GHSA-R7R6-CC7P-4V5M python-ldap has sanitization bypass in ldap.filter.escape_filter_chars
Summary The sanitization method ldap.filter.escapefilterchars can be tricked to skip escaping of special characters when a crafted list or dict is supplied as the assertionvalue parameter, and the non-default escapemode=1 is configured. Details The method ldap.filter.escapefilterchars supports 3...
AZL-68433 CVE-2025-61912 affecting package python-ldap 3.4.4-1
python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5, ldap.dn.escapednchars escapes \x00 incorrectly by emitting a backslash followed by a literal NUL byte instead of the RFC-4514 hex form \00. Any application that uses this helper to...
AZL-68451 CVE-2025-61911 affecting package python-ldap 3.4.0-1
python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5, the sanitization method ldap.filter.escapefilterchars can be tricked to skip escaping of special characters when a crafted list or dict is supplied as the assertionvalue parameter, and t...
AZL-68430 CVE-2025-61911 affecting package python-ldap 3.4.4-1
python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5, the sanitization method ldap.filter.escapefilterchars can be tricked to skip escaping of special characters when a crafted list or dict is supplied as the assertionvalue parameter, and t...
DEBIAN-CVE-2025-61911
python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5, the sanitization method ldap.filter.escapefilterchars can be tricked to skip escaping of special characters when a crafted list or dict is supplied as the assertionvalue parameter, and t...
UBUNTU-CVE-2025-61911
python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5, the sanitization method ldap.filter.escapefilterchars can be tricked to skip escaping of special characters when a crafted list or dict is supplied as the assertionvalue parameter, and t...
EUVD-2025-33796
python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5, ldap.dn.escapednchars escapes \x00 incorrectly by emitting a backslash followed by a literal NUL byte instead of the RFC-4514 hex form \00. Any application that uses this helper to...