CVE-2025-31947 Repeated LDAP login failures can lock an LDAP account

Mattermost versions 10.6.x = 10.6.1, 10.5.x = 10.5.2, 10.4.x = 10.4.4, 9.11.x = 9.11.11 fail to lockout LDAP users following repeated login failures, which allows attackers to lock external LDAP accounts through repeated login failures through Mattermost...

CVE-2025-31947

CVE-2025-31947 affects Mattermost: versions 10.6.x <= 10.6.1, 10.5.x <= 10.5.2, 10.4.x <= 10.4.4, and 9.11.x

PT-2025-21273 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.11.x through 10.6.1 Description: The issue allows attackers to lock external LDAP accounts through repeated login failures due to Mattermost's failure to lock out LDAP users following repeated login failures...

The vulnerability in the implementation of the LDAP service protocol for Microsoft Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the LDAP Lightweight Directory Access Protocol implementation in Microsoft Windows operating systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Alibaba Cloud Linux 3 : 0024: 389-ds:1.4 (ALINUX3-SA-2021:0024)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2021:0024 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-35518: When binding against a DN during...

Alibaba Cloud Linux 3 : 0158: pki-core (ALINUX3-SA-2024:0158)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0158 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-4727: A flaw was found in dogtag-pki and...

Alibaba Cloud Linux 3 : 0006: libldb (ALINUX3-SA-2023:0006)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0006 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-32746: A flaw was found in the Samba AD LD...

CVE-2025-29954

Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network...

CVE-2025-29954 Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

...

CVE-2025-29954

Technical details for CVE-2025-29954 are not publicly provided in the supplied documents. Monitor for official updates from Microsoft (MSRC) and vulnerability feeds as the connected sources are not detailed here.

Moderate: Red Hat Security Advisory: 389-ds-base security update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network...

PT-2025-20958 · Microsoft · Windows Ldap +1

Name of the Vulnerable Software and Affected Versions: Windows LDAP versions prior to the fixed version Description: The issue is related to uncontrolled resource consumption in the Lightweight Directory Access Protocol LDAP of Microsoft Windows operating systems. This can be exploited by a remot...

ALSA-2025:7395 Moderate: 389-ds-base security update

389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Security Fixes: 389-ds-base: null pointer dereference leads to denial of service CVE-2025-2487 F...

Moderate: 389-ds-base security update

389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Security Fixes: 389-ds-base: null pointer dereference leads to denial of service CVE-2025-2487 F...

PT-2025-25203 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 10.7.x through 10.7.1 Mattermost versions 10.6.x through 10.6.3 Mattermost versions 10.5.x through 10.5.4 Mattermost versions 9.11.x through 9.11.13 Description: The issue is related to the improper validation of LDAP grou...

ldap-proxy-0.1.0~90-1.1 on GA media (moderate)

ldap-proxy-0.1.090-1.1 on GA media Announcement ID: openSUSE-SU-2025:15066-1 Rating: moderate Cross-References: CVE-2025-3416 CVSS scores: CVE-2025-3416 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2025-3416 SUSE : 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N...

OPENSUSE-SU-2025:15066-1 ldap-proxy-0.1.0~90-1.1 on GA media

These are all security issues fixed in the ldap-proxy-0.1.090-1.1 package on the GA media of openSUSE Tumbleweed...

sssd bug fix update

An update is available for sssd. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The System Security Services Daemon SSSD service provides a set of daemons to...

PT-2025-20311 · F5 · F5Os

Name of the Vulnerable Software and Affected Versions: F5OS affected versions not specified Description: An improper authorization issue exists where remotely authenticated users, such as those using LDAP, RADIUS, or TACACS+, may be granted higher privilege F5OS roles than intended...