Lucene search
K

141 matches found

Tenable Nessus
Tenable Nessus
added 2022/11/14 12:0 a.m.17 views

EulerOS 2.0 SP9 : python-ldap (EulerOS-SA-2022-2739)

According to the versions of the python-ldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regul...

6.5CVSS6.4AI score0.00188EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2022/11/14 12:0 a.m.11 views

EulerOS 2.0 SP9 : python-ldap (EulerOS-SA-2022-2774)

According to the versions of the python-ldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regul...

6.5CVSS6.4AI score0.00188EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2022/11/14 12:0 a.m.8 views

Huawei EulerOS: Security Advisory for python-ldap (EulerOS-SA-2022-2739)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.5AI score0.00188EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2022/11/14 12:0 a.m.10 views

Huawei EulerOS: Security Advisory for python-ldap (EulerOS-SA-2022-2774)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.5AI score0.00188EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2022/11/03 12:0 a.m.9 views

Huawei EulerOS: Security Advisory for python-ldap (EulerOS-SA-2022-2662)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.5AI score0.00188EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2022/11/03 12:0 a.m.6 views

Huawei EulerOS: Security Advisory for python-ldap (EulerOS-SA-2022-2694)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.5AI score0.00188EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2022/11/02 12:0 a.m.16 views

EulerOS 2.0 SP10 : python-ldap (EulerOS-SA-2022-2662)

According to the versions of the python-ldap package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regula...

6.5CVSS6.4AI score0.00188EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2022/11/02 12:0 a.m.18 views

EulerOS 2.0 SP10 : python-ldap (EulerOS-SA-2022-2694)

According to the versions of the python-ldap package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regula...

6.5CVSS6.4AI score0.00188EPSS
Exploits0References2
Rockylinux
Rockylinux
added 2022/09/20 11:36 a.m.14 views

python-ldap bug fix and enhancement update

An update is available for python-ldap. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The python-ldap packages provide an object-oriented API for working with...

1.4AI score
Exploits0
OSV
OSV
added 2022/08/29 5:7 a.m.3 views

MGASA-2022-0310 Updated python-ldap packages fix security vulnerability

It was discovered that Python LDAP incorrectly handled certain regular expressions. A remote attacker could possibly use this issue to cause a denial of service CVE-2021-46823...

6.5CVSS6.5AI score0.00188EPSS
Exploits0References4
Mageia
Mageia
added 2022/08/29 5:7 a.m.34 views

Updated python-ldap packages fix security vulnerability

It was discovered that Python LDAP incorrectly handled certain regular expressions. A remote attacker could possibly use this issue to cause a denial of service CVE-2021-46823...

6.5CVSS2.5AI score0.00188EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2022/07/12 12:0 a.m.8 views

Ubuntu: Security Advisory (USN-5508-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.5AI score0.00188EPSS
Exploits0References2
OSV
OSV
added 2022/07/11 2:9 p.m.1 views

USN-5508-1 python-ldap vulnerability

It was discovered that Python LDAP incorrectly handled certain regular expressions. An remote attacker could possibly use this issue to cause a denial of service...

6.5CVSS6.6AI score0.00188EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2022/07/11 12:0 a.m.15 views

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Python LDAP vulnerability (USN-5508-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5508-1 advisory. It was discovered that Python LDAP incorrectly handled certain regular expressions. An remote attacker could possibly use this issue to...

6.5CVSS6.5AI score0.00188EPSS
Exploits0References2
Microsoft CVE
Microsoft CVE
added 2022/06/29 7:0 a.m.1 views

python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions because of a regular expression denial of service (ReDoS) flaw in the LDAP schema parser. By sending crafted regex input a remote authenticated attacker could exploit this vulnerability to cause a denial of service condition.

...

6.5CVSS6.5AI score0.00188EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2022/06/20 3:59 p.m.21 views

CVE-2021-46823

A flaw was found in python-ldap. The vulnerability occurs due to a regular expression and leads to a denial of service attack. This flaw allows an attacker to parse LDAP schema definitions from an untrusted source, leading to a crash or code execution. Mitigation Check input for an excessive amou...

6.5CVSS5.4AI score0.00188EPSS
Exploits0References3
vulnersOsv
vulnersOsv
added 2022/06/19 12:0 a.m.3 views

anomalydetection (=0.0.0.dev1), csh-ldap (>=2.2.1.dev6 <=2.3.1.dev4) +12 more potentially affected by CVE-2021-46823 via python-ldap (>=2.4.19 <=3.3.1)

python-ldap PYPI version =2.4.19, =2.2.1.dev6, =0.0.2, =0.4.4, =1.0.0, =0.0.0, =1.0.0, =1.1.7, =0.4.4, =0.0.1, =1.3.3, =0.8.0, =0.9.2 Source cves: CVE-2021-46823 Source advisory: OSV:GHSA-QFR5-WJPW-Q4C4...

6.5CVSS6.5AI score0.00188EPSS
Exploits0
OSV
OSV
added 2022/06/19 12:0 a.m.18 views

GHSA-QFR5-WJPW-Q4C4 Denial of Service in python-ldap

python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regular expression denial of service ReDoS flaw in the LDAP schema parser. By sending crafted regex input, a remote authenticated attacker could exploit this...

6.5CVSS6AI score0.00188EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2022/06/19 12:0 a.m.14 views

Denial of Service in python-ldap

python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regular expression denial of service ReDoS flaw in the LDAP schema parser. By sending crafted regex input, a remote authenticated attacker could exploit this...

6.5CVSS4.2AI score0.00188EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2022/06/18 4:15 p.m.19 views

CVE-2021-46823

python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regular expression denial of service ReDoS flaw in the LDAP schema parser. By sending crafted regex input, a remote authenticated attacker could exploit this...

6.5CVSS6.1AI score
Exploits0References2
Rows per page
Query Builder