Every CVE Search/ Get API key

CVE-2021-27212

In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur...

7.5 HighFix available

In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

66.1%Up 64.3 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.5

In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.

Record
CVE-2021-27212
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-617
Updated
2026-11-02
CVE List No score

In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.

Record
CVE-2021-27212
Updated
2026-11-02
EUVDEUVD-2021-13977 No score

In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.

Record
EUVD-2021-13977
Updated
2026-11-02
GitHub AdvisoriesGHSA-274h-c788-hf3c 7.5

In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur...

In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.

Record
GHSA-274h-c788-hf3c
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-617
Updated
2026-11-02
OSVALPINE-CVE-2021-27212 7.5

In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.

Record
ALPINE-CVE-2021-27212
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-6771 7.5

CVE-2021-27212 affecting package openldap for versions less than 2.4.57-5

In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.

Record
AZL-6771
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 21 moreShow less
OSVBELL-CVE-2021-27212 7.5

CVE-2021-27212 does not affect BellSoft software

Record
BELL-CVE-2021-27212
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 7.5

In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.

Record
CVE-2021-27212
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2021-27212 7.5

In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.

Record
DEBIAN-CVE-2021-27212
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVJLSEC-2026-173 7.5

In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.

Record
JLSEC-2026-173
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
OSVOESA-2021-1119 7.5

openldap security update

OpenLDAP is an open source suite of LDAP (Lightweight Directory Access Protocol) applications and development tools. LDAP is a set of protocols for accessing directory services (usually phone book style information, but other information is possible) over the Internet, similar to the way DNS (Domain Name System) information is propagated over the Internet. The openldap package contains configuration files, libraries, and documentation for OpenLDAP.

Security Fix(es):

In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.(CVE-2021-27212)

Record
OESA-2021-1119
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2021-27212 7.5

In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.

Record
UBUNTU-CVE-2021-27212
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBIT-openldap-2021-27212 No score

In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.

Record
BIT-openldap-2021-27212
Updated
2026-11-02
OSVCLSA-2021-1637770462 No score

Fixed CVE-2021-27212 in openldap

  • CVE-2021-27212: fix DoS via malicious packet
Record
CLSA-2021-1637770462
Updated
2026-11-02
OSVCLSA-2021-1638803748 No score

Fix of CVE: CVE-2021-27212

  • CVE-2021-27212: fix DoS via malicious packet
Record
CLSA-2021-1638803748
Updated
2026-11-02
OSVCLSA-2022-1646915783 No score

Fix of CVE: CVE-2021-27212

  • CVE-2021-27212: a malicious packet can force OpenLDAP to fail an assertion and crash
Record
CLSA-2022-1646915783
Updated
2026-11-02
OSVCLSA-2023-1695834945 No score

openldap: Fix of 2 CVEs

  • CVE-2022-29155: fix a SQL injection vulnerability in the back-sql backend to slapd
  • CVE-2021-27212: fix denial of service (daemon exit) via a short timestamp if slapd is used
Record
CLSA-2023-1695834945
Updated
2026-11-02
OSVCLSA-2026-1777031791 No score

openldap: Fix of 2 CVEs

  • CVE-2022-29155: fix a SQL injection vulnerability in the back-sql backend to slapd
  • CVE-2021-27212: fix denial of service (daemon exit) via a short timestamp if slapd is used
Record
CLSA-2026-1777031791
Updated
2026-11-02
OSVCLSA-2026-1777051819 No score

openldap: Fix of 2 CVEs

  • CVE-2022-29155: fix a SQL injection vulnerability in the back-sql backend to slapd
  • CVE-2021-27212: fix denial of service (daemon exit) via a short timestamp if slapd is used
Record
CLSA-2026-1777051819
Updated
2026-11-02
OSVMGASA-2021-0105 No score

Updated openldap packages fix security vulnerabilities

It was discovered that OpenLDAP incorrectly handled Certificate Exact Assertion processing. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service (CVE-2020-36221).

It was discovered that OpenLDAP incorrectly handled saslAuthzTo processing. A remote attacker could use this issue to cause OpenLDAP to crash, resulting in a denial of service, or possibly execute arbitrary code (CVE-2020-36222, CVE-2020-36224, CVE-2020-36225, CVE-2020-36226).

It was discovered that OpenLDAP incorrectly handled Return Filter control handling. A remote attacker could use this issue to cause OpenLDAP to crash, resulting in a denial of service, or possibly execute arbitrary code (CVE-2020-36223).

It was discovered that OpenLDAP incorrectly handled certain cancel operations. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service (CVE-2020-36227).

It was discovered that OpenLDAP incorrectly handled Certificate List Extract Assertion processing. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service (CVE-2020-36228).

It was discovered that OpenLDAP incorrectly handled X.509 DN parsing. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service (CVE-2020-36229, CVE-2020-36230).

Pasi Saarinen discovered that OpenLDAP incorrectly handled certain short timestamps. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service (CVE-2021-27212).

Record
MGASA-2021-0105
Updated
2026-11-02
OSVopenSUSE-SU-2021:0408-1 No score

Security update for openldap2

This update for openldap2 fixes the following issues:

  • bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service.
  • bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN parsing in ad_keystring, resulting in denial of service.
  • bsc#1182412 CVE-2020-36228 - integer underflow leading to crash in the Certificate List Exact Assertion processing, resulting in denial of service.
  • bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.
  • bsc#1182416 CVE-2020-36225 - double free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
  • bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
  • bsc#1182415 CVE-2020-36226 - memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.
  • bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.
  • bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).
  • bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).
  • bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2021:0408-1
Updated
2026-11-02
OSVSUSE-SU-2021:0692-1 No score

Security update for openldap2

This update for openldap2 fixes the following issues:

  • bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service.
  • bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN parsing in ad_keystring, resulting in denial of service.
  • bsc#1182412 CVE-2020-36228 - integer underflow leading to crash in the Certificate List Exact Assertion processing, resulting in denial of service.
  • bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.
  • bsc#1182416 CVE-2020-36225 - double free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
  • bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
  • bsc#1182415 CVE-2020-36226 - memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.
  • bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.
  • bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).
  • bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).
  • bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.
Record
SUSE-SU-2021:0692-1
Updated
2026-11-02
OSVSUSE-SU-2021:0693-1 No score

Security update for openldap2

This update for openldap2 fixes the following issues:

  • bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service.
  • bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN parsing in ad_keystring, resulting in denial of service.
  • bsc#1182412 CVE-2020-36228 - integer underflow leading to crash in the Certificate List Exact Assertion processing, resulting in denial of service.
  • bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.
  • bsc#1182416 CVE-2020-36225 - double free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
  • bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
  • bsc#1182415 CVE-2020-36226 - memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.
  • bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.
  • bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).
  • bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).
  • bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.
Record
SUSE-SU-2021:0693-1
Updated
2026-11-02
OSVSUSE-SU-2021:0723-1 No score

Security update for openldap2

This update for openldap2 fixes the following issues:

  • bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service.
  • bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN parsing in ad_keystring, resulting in denial of service.
  • bsc#1182412 CVE-2020-36228 - integer underflow leading to crash in the Certificate List Exact Assertion processing, resulting in denial of service.
  • bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.
  • bsc#1182416 CVE-2020-36225 - double free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
  • bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
  • bsc#1182415 CVE-2020-36226 - memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.
  • bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.
  • bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).
  • bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).
  • bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.
Record
SUSE-SU-2021:0723-1
Updated
2026-11-02
OSVSUSE-SU-2021:14700-1 No score

Security update for openldap2

This update for openldap2 fixes the following issues:

  • bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service.
  • bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN parsing in ad_keystring, resulting in denial of service.
  • bsc#1182412 CVE-2020-36228 - integer underflow leading to crash in the Certificate List Exact Assertion processing, resulting in denial of service.
  • bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.
  • bsc#1182416 CVE-2020-36225 - double free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
  • bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
  • bsc#1182415 CVE-2020-36226 - memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.
  • bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.
  • bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).
  • bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).
  • bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.
  • resynchronise changelogs with subpackages (bsc#1184020).
Record
SUSE-SU-2021:14700-1
Updated
2026-11-02
OSVUSN-4744-1 No score

openldap vulnerability

Pasi Saarinen discovered that OpenLDAP incorrectly handled certain short timestamps. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service.

Record
USN-4744-1
Updated
2026-11-02
OSVUSN-7713-1 No score

openldap vulnerabilities

It was discovered that OpenLDAP incorrectly handled X.509 DN parsing. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service. (CVE-2020-36229, CVE-2020-36230)

Pasi Saarinen discovered that OpenLDAP incorrectly handled certain short timestamps. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service. (CVE-2021-27212)

Record
USN-7713-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openldap
Alpine:v3.12
 before 2.4.50-r2
2.4.50-r2
openldap
Alpine:v3.13
 before 2.4.57-r1
2.4.57-r1
openldap
Alpine:v3.14
 before 2.4.57-r1
2.4.57-r1
openldap
Alpine:v3.15
 before 2.4.57-r1
2.4.57-r1
openldap
Alpine:v3.16
 before 2.4.57-r1
2.4.57-r1
openldap
Alpine:v3.17
 before 2.4.57-r1
2.4.57-r1
openldap
Alpine:v3.18
 before 2.4.57-r1
2.4.57-r1
openldap
Alpine:v3.19
 before 2.4.57-r1
2.4.57-r1
openldap
Alpine:v3.20
 before 2.4.57-r1
2.4.57-r1
openldap
Alpine:v3.21
 before 2.4.57-r1
2.4.57-r1
Show 93 moreShow less
Affected packages
PackageAffectedFixed
openldap
Alpine:v3.22
 before 2.4.57-r1
2.4.57-r1
openldap
Alpine:v3.23
 before 2.4.57-r1
2.4.57-r1
openldap
Alpine:v3.24
 before 2.4.57-r1
2.4.57-r1
openldap
Azure Linux:2
 before 2.4.57-5
2.4.57-5
openldap
Bitnami
 before 2.4.58
2.4.58
openldap
TuxCare:OracleLinux:6
 before 2.4.40-16.el6.tuxcare.els1
2.4.40-16.el6.tuxcare.els1
openldap-clients
TuxCare:OracleLinux:6
 before 2.4.40-16.el6.tuxcare.els1
2.4.40-16.el6.tuxcare.els1
openldap-devel
TuxCare:OracleLinux:6
 before 2.4.40-16.el6.tuxcare.els1
2.4.40-16.el6.tuxcare.els1
openldap-servers
TuxCare:OracleLinux:6
 before 2.4.40-16.el6.tuxcare.els1
2.4.40-16.el6.tuxcare.els1
openldap-servers-sql
TuxCare:OracleLinux:6
 before 2.4.40-16.el6.tuxcare.els1
2.4.40-16.el6.tuxcare.els1
openldap
TuxCare:CentOS:6
 before 2.4.40-16.el6.tuxcare.els1
2.4.40-16.el6.tuxcare.els1
openldap-clients
TuxCare:CentOS:6
 before 2.4.40-16.el6.tuxcare.els1
2.4.40-16.el6.tuxcare.els1
openldap-devel
TuxCare:CentOS:6
 before 2.4.40-16.el6.tuxcare.els1
2.4.40-16.el6.tuxcare.els1
openldap-servers
TuxCare:CentOS:6
 before 2.4.40-16.el6.tuxcare.els1
2.4.40-16.el6.tuxcare.els1
openldap-servers-sql
TuxCare:CentOS:6
 before 2.4.40-16.el6.tuxcare.els1
2.4.40-16.el6.tuxcare.els1
openldap
TuxCare:CentOS:8.4
 before 2.4.46-17.el8_4.tuxcare.els1
2.4.46-17.el8_4.tuxcare.els1
openldap-clients
TuxCare:CentOS:8.4
 before 2.4.46-17.el8_4.tuxcare.els1
2.4.46-17.el8_4.tuxcare.els1
openldap-devel
TuxCare:CentOS:8.4
 before 2.4.46-17.el8_4.tuxcare.els1
2.4.46-17.el8_4.tuxcare.els1
openldap-servers
TuxCare:CentOS:8.4
 before 2.4.46-17.el8_4.tuxcare.els1
2.4.46-17.el8_4.tuxcare.els1
openldap
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 2.4.44-25.el7_9.tuxcare.els1
2.4.44-25.el7_9.tuxcare.els1
openldap-clients
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 2.4.44-25.el7_9.tuxcare.els1
2.4.44-25.el7_9.tuxcare.els1
openldap-devel
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 2.4.44-25.el7_9.tuxcare.els1
2.4.44-25.el7_9.tuxcare.els1
openldap-servers
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 2.4.44-25.el7_9.tuxcare.els1
2.4.44-25.el7_9.tuxcare.els1
openldap-servers-sql
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 2.4.44-25.el7_9.tuxcare.els1
2.4.44-25.el7_9.tuxcare.els1
openldap
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 2.4.44-25.el7_9.tuxcare.els1
2.4.44-25.el7_9.tuxcare.els1
openldap-clients
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 2.4.44-25.el7_9.tuxcare.els1
2.4.44-25.el7_9.tuxcare.els1
openldap-devel
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 2.4.44-25.el7_9.tuxcare.els1
2.4.44-25.el7_9.tuxcare.els1
openldap-servers
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 2.4.44-25.el7_9.tuxcare.els1
2.4.44-25.el7_9.tuxcare.els1
openldap-servers-sql
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 2.4.44-25.el7_9.tuxcare.els1
2.4.44-25.el7_9.tuxcare.els1
openldap
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 2.4.44-25.el7_9.tuxcare.els1
2.4.44-25.el7_9.tuxcare.els1
openldap-clients
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 2.4.44-25.el7_9.tuxcare.els1
2.4.44-25.el7_9.tuxcare.els1
openldap-devel
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 2.4.44-25.el7_9.tuxcare.els1
2.4.44-25.el7_9.tuxcare.els1
openldap-servers
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 2.4.44-25.el7_9.tuxcare.els1
2.4.44-25.el7_9.tuxcare.els1
openldap-servers-sql
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 2.4.44-25.el7_9.tuxcare.els1
2.4.44-25.el7_9.tuxcare.els1
openldap
Debian:12
 before 2.4.57+dfsg-2
2.4.57+dfsg-2
openldap
Debian:13
 before 2.4.57+dfsg-2
2.4.57+dfsg-2
openldap
Debian:14
 before 2.4.57+dfsg-2
2.4.57+dfsg-2
openldap
Debian:9
 before 2.4.44+dfsg-5+deb9u8, plus listed versions
2.4.44+dfsg-52.4.44+dfsg-5+deb9u12.4.44+dfsg-5+deb9u1~bpo8+12.4.44+dfsg-5+deb9u22.4.44+dfsg-5+deb9u3
Show 4 moreShow less
2.4.44+dfsg-5+deb9u42.4.44+dfsg-5+deb9u52.4.44+dfsg-5+deb9u62.4.44+dfsg-5+deb9u7
2.4.44+dfsg-5+deb9u8
openldap
Debian:10
 before 2.4.47+dfsg-3+deb10u6, plus listed versions
2.4.47+dfsg-32.4.47+dfsg-3+deb10u12.4.47+dfsg-3+deb10u1~bpo9+12.4.47+dfsg-3+deb10u22.4.47+dfsg-3+deb10u2~bpo9+12.4.47+dfsg-3+deb10u32.4.47+dfsg-3+deb10u42.4.47+dfsg-3+deb10u5
2.4.47+dfsg-3+deb10u6
OpenLDAPClient_jll
Julia
 before 2.5.14+0
2.5.14+0
openldap
Mageia:7
From an advisory covering 11 CVEs
 before 2.4.50-1.4.mga7
2.4.50-1.4.mga7
openldap
Mageia:8
From an advisory covering 11 CVEs
 before 2.4.57-1.1.mga8
2.4.57-1.1.mga8
openldap
openEuler:20.03-LTS
 before 2.4.50-4.oe1
2.4.50-4.oe1
openldap
openEuler:20.03-LTS-SP1
 before 2.4.50-4.oe1
2.4.50-4.oe1
openldap2
SUSE:Linux Enterprise Module for Legacy 12
From an advisory covering 11 CVEs
 before 2.4.41-39.1
2.4.41-39.1
openldap2
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 11 CVEs
 before 2.4.41-39.1
2.4.41-39.1
openldap2
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 11 CVEs
 before 2.4.41-39.1
2.4.41-39.1
openldap2
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 11 CVEs
 before 2.4.41-39.1
2.4.41-39.1
openldap2
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 11 CVEs
 before 2.4.41-39.1
2.4.41-39.1
openldap2
SUSE:HPE Helion OpenStack 8
From an advisory covering 11 CVEs
 before 2.4.41-18.83.1
2.4.41-18.83.1
openldap2
SUSE:OpenStack Cloud 7
From an advisory covering 11 CVEs
 before 2.4.41-18.83.1
2.4.41-18.83.1
openldap2
SUSE:OpenStack Cloud 8
From an advisory covering 11 CVEs
 before 2.4.41-18.83.1
2.4.41-18.83.1
openldap2
SUSE:OpenStack Cloud 9
From an advisory covering 11 CVEs
 before 2.4.41-18.83.1
2.4.41-18.83.1
openldap2
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 11 CVEs
 before 2.4.41-18.83.1
2.4.41-18.83.1
openldap2
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 11 CVEs
 before 2.4.41-18.83.1
2.4.41-18.83.1
openldap2
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 11 CVEs
 before 2.4.41-18.83.1
2.4.41-18.83.1
openldap2
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 11 CVEs
 before 2.4.41-18.83.1
2.4.41-18.83.1
openldap2
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 11 CVEs
 before 2.4.41-18.83.1
2.4.41-18.83.1
openldap2
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 11 CVEs
 before 2.4.41-18.83.1
2.4.41-18.83.1
openldap2
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 11 CVEs
 before 2.4.41-18.83.1
2.4.41-18.83.1
openldap2
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 11 CVEs
 before 2.4.41-18.83.1
2.4.41-18.83.1
openldap2
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 11 CVEs
 before 2.4.41-18.83.1
2.4.41-18.83.1
openldap2
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 11 CVEs
 before 2.4.41-18.83.1
2.4.41-18.83.1
openldap2
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 11 CVEs
 before 2.4.41-18.83.1
2.4.41-18.83.1
openldap2
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 11 CVEs
 before 2.4.41-18.83.1
2.4.41-18.83.1
openldap2
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 11 CVEs
 before 2.4.41-18.83.1
2.4.41-18.83.1
openldap2
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 11 CVEs
 before 2.4.46-9.48.1
2.4.46-9.48.1
openldap2
SUSE:Linux Enterprise Module for Development Tools 15 SP2
From an advisory covering 11 CVEs
 before 2.4.46-9.48.1
2.4.46-9.48.1
openldap2
SUSE:Linux Enterprise Module for Legacy 15 SP2
From an advisory covering 11 CVEs
 before 2.4.46-9.48.1
2.4.46-9.48.1
openldap2
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 11 CVEs
 before 2.4.46-9.48.1
2.4.46-9.48.1
openldap2
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 11 CVEs
 before 2.4.46-9.48.1
2.4.46-9.48.1
openldap2
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 11 CVEs
 before 2.4.46-9.48.1
2.4.46-9.48.1
openldap2
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 11 CVEs
 before 2.4.46-9.48.1
2.4.46-9.48.1
openldap2
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 11 CVEs
 before 2.4.46-9.48.1
2.4.46-9.48.1
openldap2
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 11 CVEs
 before 2.4.46-9.48.1
2.4.46-9.48.1
openldap2
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 11 CVEs
 before 2.4.46-9.48.1
2.4.46-9.48.1
openldap2
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 11 CVEs
 before 2.4.46-9.48.1
2.4.46-9.48.1
openldap2
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 11 CVEs
 before 2.4.46-9.48.1
2.4.46-9.48.1
openldap2
SUSE:Manager Proxy 4.0
From an advisory covering 11 CVEs
 before 2.4.46-9.48.1
2.4.46-9.48.1
openldap2
SUSE:Manager Retail Branch Server 4.0
From an advisory covering 11 CVEs
 before 2.4.46-9.48.1
2.4.46-9.48.1
openldap2
SUSE:Manager Server 4.0
From an advisory covering 11 CVEs
 before 2.4.46-9.48.1
2.4.46-9.48.1
openldap2
SUSE:Enterprise Storage 6
From an advisory covering 11 CVEs
 before 2.4.46-9.48.1
2.4.46-9.48.1
openldap2-client-openssl1
SUSE:Linux Enterprise Server 11-SECURITY
From an advisory covering 11 CVEs
 before 2.4.26-0.74.26.1
2.4.26-0.74.26.1
openldap2
SUSE:Linux Enterprise Point of Sale 11 SP3
From an advisory covering 11 CVEs
 before 2.4.26-0.74.26.1
2.4.26-0.74.26.1
openldap2-client
SUSE:Linux Enterprise Point of Sale 11 SP3
From an advisory covering 11 CVEs
 before 2.4.26-0.74.26.1
2.4.26-0.74.26.1
openldap2
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 11 CVEs
 before 2.4.26-0.74.26.1
2.4.26-0.74.26.1
openldap2-client
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 11 CVEs
 before 2.4.26-0.74.26.1
2.4.26-0.74.26.1
openldap
Ubuntu:Pro:14.04:LTS
 before 2.4.31-1+nmu2ubuntu8.5+esm8, plus listed versions
2.4.31-1+nmu2ubuntu32.4.31-1+nmu2ubuntu42.4.31-1+nmu2ubuntu52.4.31-1+nmu2ubuntu82.4.31-1+nmu2ubuntu8.1
Show 11 moreShow less
2.4.31-1+nmu2ubuntu8.22.4.31-1+nmu2ubuntu8.32.4.31-1+nmu2ubuntu8.42.4.31-1+nmu2ubuntu8.52.4.31-1+nmu2ubuntu8.5+esm12.4.31-1+nmu2ubuntu8.5+esm22.4.31-1+nmu2ubuntu8.5+esm32.4.31-1+nmu2ubuntu8.5+esm42.4.31-1+nmu2ubuntu8.5+esm52.4.31-1+nmu2ubuntu8.5+esm62.4.31-1+nmu2ubuntu8.5+esm7
2.4.31-1+nmu2ubuntu8.5+esm8
openldap
Ubuntu:16.04:LTS
 before 2.4.42+dfsg-2ubuntu3.13, plus listed versions
2.4.41+dfsg-1ubuntu22.4.41+dfsg-1ubuntu32.4.42+dfsg-2ubuntu12.4.42+dfsg-2ubuntu32.4.42+dfsg-2ubuntu3.1
Show 11 moreShow less
2.4.42+dfsg-2ubuntu3.22.4.42+dfsg-2ubuntu3.32.4.42+dfsg-2ubuntu3.42.4.42+dfsg-2ubuntu3.52.4.42+dfsg-2ubuntu3.62.4.42+dfsg-2ubuntu3.72.4.42+dfsg-2ubuntu3.82.4.42+dfsg-2ubuntu3.92.4.42+dfsg-2ubuntu3.102.4.42+dfsg-2ubuntu3.112.4.42+dfsg-2ubuntu3.12
2.4.42+dfsg-2ubuntu3.13
openldap
Ubuntu:18.04:LTS
 before 2.4.45+dfsg-1ubuntu1.10, plus listed versions
2.4.45+dfsg-1ubuntu12.4.45+dfsg-1ubuntu1.12.4.45+dfsg-1ubuntu1.22.4.45+dfsg-1ubuntu1.32.4.45+dfsg-1ubuntu1.4
Show 5 moreShow less
2.4.45+dfsg-1ubuntu1.52.4.45+dfsg-1ubuntu1.62.4.45+dfsg-1ubuntu1.72.4.45+dfsg-1ubuntu1.82.4.45+dfsg-1ubuntu1.9
2.4.45+dfsg-1ubuntu1.10
openldap
Ubuntu:20.04:LTS
 before 2.4.49+dfsg-2ubuntu1.7, plus listed versions
2.4.48+dfsg-1ubuntu12.4.48+dfsg-1ubuntu22.4.48+dfsg-1ubuntu32.4.48+dfsg-1ubuntu42.4.49+dfsg-1ubuntu1
Show 6 moreShow less
2.4.49+dfsg-2ubuntu12.4.49+dfsg-2ubuntu1.22.4.49+dfsg-2ubuntu1.32.4.49+dfsg-2ubuntu1.42.4.49+dfsg-2ubuntu1.52.4.49+dfsg-2ubuntu1.6
2.4.49+dfsg-2ubuntu1.7
openldap
Ubuntu:Pro:14.04:LTS
From an advisory covering 3 CVEs
 before 2.4.31-1+nmu2ubuntu8.5+esm8, plus listed versions
2.4.31-1+nmu2ubuntu32.4.31-1+nmu2ubuntu42.4.31-1+nmu2ubuntu52.4.31-1+nmu2ubuntu82.4.31-1+nmu2ubuntu8.1
Show 11 moreShow less
2.4.31-1+nmu2ubuntu8.22.4.31-1+nmu2ubuntu8.32.4.31-1+nmu2ubuntu8.42.4.31-1+nmu2ubuntu8.52.4.31-1+nmu2ubuntu8.5+esm12.4.31-1+nmu2ubuntu8.5+esm22.4.31-1+nmu2ubuntu8.5+esm32.4.31-1+nmu2ubuntu8.5+esm42.4.31-1+nmu2ubuntu8.5+esm52.4.31-1+nmu2ubuntu8.5+esm62.4.31-1+nmu2ubuntu8.5+esm7
2.4.31-1+nmu2ubuntu8.5+esm8
openldap2
openSUSE:Leap 15.2
From an advisory covering 11 CVEs
 before 2.4.46-lp152.14.18.1
2.4.46-lp152.14.18.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-27212 is a high vulnerability (CVSS 7.5) in Openldap, published February 14, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 66.1%, the 99th percentile. Fixed in openldap 2.4.50-r2.

References

Show 54 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open