A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.
| Link | Tags |
|---|---|
| https://www.debian.org/security/2020/dsa-4792 | third party advisory vendor advisory |
| https://lists.debian.org/debian-lts-announce/2020/12/msg00008.html | third party advisory mailing list |
| https://support.apple.com/kb/HT212147 | third party advisory |
| http://seclists.org/fulldisclosure/2021/Feb/14 | third party advisory mailing list |
| https://bugzilla.redhat.com/show_bug.cgi?id=1899675 | patch third party advisory issue tracking |
| https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E | mailing list |
| https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E | mailing list |
| https://security.netapp.com/advisory/ntap-20210716-0003/ | third party advisory |