CVE-2021-46823: Denial of Service in python-ldap

June 19, 2022 (updated June 20, 2022)

python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regular expression denial of service (ReDoS) flaw in the LDAP schema parser. By sending crafted regex input, a remote authenticated attacker could exploit this vulnerability to cause a denial of service condition.

References

exchange.xforce.ibmcloud.com/vulnerabilities/221507
github.com/advisories/GHSA-qfr5-wjpw-q4c4
github.com/python-ldap/python-ldap/security/advisories/GHSA-r8wq-qrxc-hmcm
nvd.nist.gov/vuln/detail/CVE-2021-46823

Code Behaviors & Features

Detect and mitigate CVE-2021-46823 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →