GHSA-qfr5-wjpw-q4c4MediumCVSS 6.5

Denial of Service in python-ldap

Published
June 19, 2022
Last Modified
August 17, 2023

🔗 CVE IDs covered (1)

CVE-2021-46823 →

📋 Description

python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regular expression denial of service (ReDoS) flaw in the LDAP schema parser. By sending crafted regex input, a remote authenticated attacker could exploit this vulnerability to cause a denial of service condition.

🎯 Affected products1

  • pip/python-ldap:< 3.4.0

🔗 References (4)