CVE-2021-46823 | BDVDB-2026-178557 Detail

Description#

python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regular expression denial of service (ReDoS) flaw in the LDAP schema parser. By sending crafted regex input, a remote authenticated attacker could exploit this vulnerability to cause a denial of service condition.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12022-06-18Record published in the CVE List.
2. Version 22024-08-04Most recent update recorded in the CVE List.