{"id":"CVE-2021-27212","aliases":["ALPINE-CVE-2021-27212","AZL-6771","BELL-CVE-2021-27212","BIT-openldap-2021-27212","CLSA-2021-1637770462","CLSA-2021-1638803748","CLSA-2022-1646915783","CLSA-2023-1695834945","CLSA-2026-1777031791","CLSA-2026-1777051819","DEBIAN-CVE-2021-27212","DLA-2574-1","DSA-4860-1","EUVD-2021-13977","GHSA-274h-c788-hf3c","JLSEC-2026-173","MGASA-2021-0105","OESA-2021-1119","SUSE-SU-2021:0692-1","SUSE-SU-2021:0693-1","SUSE-SU-2021:0723-1","SUSE-SU-2021:14700-1","UBUNTU-CVE-2021-27212","USN-4744-1","USN-7713-1","openSUSE-SU-2021:0408-1"],"status":"published","title":"In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur...","description":"In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.66114,"percentile":0.99287,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-617"],"published":"2021-02-14T02:53:26Z","modified":"2026-11-02T02:45:55Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"openldap","fixed_in":["2.4.50-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"openldap","fixed_in":["2.4.57-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"openldap","fixed_in":["2.4.57-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"openldap","fixed_in":["2.4.57-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openldap","fixed_in":["2.4.57-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openldap","fixed_in":["2.4.57-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openldap","fixed_in":["2.4.57-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openldap","fixed_in":["2.4.57-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openldap","fixed_in":["2.4.57-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openldap","fixed_in":["2.4.57-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openldap","fixed_in":["2.4.57-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openldap","fixed_in":["2.4.57-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openldap","fixed_in":["2.4.57-r1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"openldap","fixed_in":["2.4.57-5"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"openldap","fixed_in":["2.4.58"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"openldap","fixed_in":["2.4.40-16.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"openldap-clients","fixed_in":["2.4.40-16.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"openldap-devel","fixed_in":["2.4.40-16.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"openldap-servers","fixed_in":["2.4.40-16.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"openldap-servers-sql","fixed_in":["2.4.40-16.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"openldap","fixed_in":["2.4.40-16.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"openldap-clients","fixed_in":["2.4.40-16.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"openldap-devel","fixed_in":["2.4.40-16.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"openldap-servers","fixed_in":["2.4.40-16.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"openldap-servers-sql","fixed_in":["2.4.40-16.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openldap","fixed_in":["2.4.46-17.el8_4.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openldap-clients","fixed_in":["2.4.46-17.el8_4.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openldap-devel","fixed_in":["2.4.46-17.el8_4.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openldap-servers","fixed_in":["2.4.46-17.el8_4.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"openldap","fixed_in":["2.4.57+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openldap","fixed_in":["2.4.57+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openldap","fixed_in":["2.4.57+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"openldap","fixed_in":["2.4.44+dfsg-5+deb9u8"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"openldap","fixed_in":["2.4.47+dfsg-3+deb10u6"],"sources":["osv"]},{"ecosystem":"Julia","package":"OpenLDAPClient_jll","fixed_in":["2.5.14+0"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS","package":"openldap","fixed_in":["2.4.50-4.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"openldap","fixed_in":["2.4.50-4.oe1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openldap","fixed_in":["2.4.31-1+nmu2ubuntu8.5+esm8"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"openldap","fixed_in":["2.4.42+dfsg-2ubuntu3.13"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"openldap","fixed_in":["2.4.45+dfsg-1ubuntu1.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"openldap","fixed_in":["2.4.49+dfsg-2ubuntu1.7"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57-r1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57-5"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"openldap","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.4.58"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.40-16.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.40-16.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.40-16.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.40-16.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.40-16.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.40-16.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.40-16.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.40-16.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.40-16.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.40-16.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-17.el8_4.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-17.el8_4.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-17.el8_4.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-17.el8_4.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.44+dfsg-5+deb9u8"}]}],"versions":["2.4.44+dfsg-5","2.4.44+dfsg-5+deb9u1","2.4.44+dfsg-5+deb9u1~bpo8+1","2.4.44+dfsg-5+deb9u2","2.4.44+dfsg-5+deb9u3","2.4.44+dfsg-5+deb9u4","2.4.44+dfsg-5+deb9u5","2.4.44+dfsg-5+deb9u6","2.4.44+dfsg-5+deb9u7"]},{"source":"osv","ecosystem":"Debian:10","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.47+dfsg-3+deb10u6"}]}],"versions":["2.4.47+dfsg-3","2.4.47+dfsg-3+deb10u1","2.4.47+dfsg-3+deb10u1~bpo9+1","2.4.47+dfsg-3+deb10u2","2.4.47+dfsg-3+deb10u2~bpo9+1","2.4.47+dfsg-3+deb10u3","2.4.47+dfsg-3+deb10u4","2.4.47+dfsg-3+deb10u5"]},{"source":"osv","ecosystem":"Julia","package":"OpenLDAPClient_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.5.14+0"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-1.4.mga7"}]}],"bundled":11},{"source":"osv","ecosystem":"Mageia:8","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57-1.1.mga8"}]}],"bundled":11},{"source":"osv","ecosystem":"openEuler:20.03-LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-4.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-4.oe1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 12","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-39.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-39.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-39.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-39.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-39.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.83.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.83.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.83.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.83.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.83.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.83.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.83.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.83.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.83.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.83.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.83.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.83.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.83.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.83.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.83.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.83.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-18.83.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.48.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.48.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP2","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.48.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.48.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.48.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.48.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.48.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.48.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.48.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.48.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.48.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.48.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.48.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.48.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.48.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-9.48.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11-SECURITY","package":"openldap2-client-openssl1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-0.74.26.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-0.74.26.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"openldap2-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-0.74.26.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-0.74.26.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"openldap2-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-0.74.26.1"}]}],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.31-1+nmu2ubuntu8.5+esm8"}]}],"versions":["2.4.31-1+nmu2ubuntu3","2.4.31-1+nmu2ubuntu4","2.4.31-1+nmu2ubuntu5","2.4.31-1+nmu2ubuntu8","2.4.31-1+nmu2ubuntu8.1","2.4.31-1+nmu2ubuntu8.2","2.4.31-1+nmu2ubuntu8.3","2.4.31-1+nmu2ubuntu8.4","2.4.31-1+nmu2ubuntu8.5","2.4.31-1+nmu2ubuntu8.5+esm1","2.4.31-1+nmu2ubuntu8.5+esm2","2.4.31-1+nmu2ubuntu8.5+esm3","2.4.31-1+nmu2ubuntu8.5+esm4","2.4.31-1+nmu2ubuntu8.5+esm5","2.4.31-1+nmu2ubuntu8.5+esm6","2.4.31-1+nmu2ubuntu8.5+esm7"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.42+dfsg-2ubuntu3.13"}]}],"versions":["2.4.41+dfsg-1ubuntu2","2.4.41+dfsg-1ubuntu3","2.4.42+dfsg-2ubuntu1","2.4.42+dfsg-2ubuntu3","2.4.42+dfsg-2ubuntu3.1","2.4.42+dfsg-2ubuntu3.2","2.4.42+dfsg-2ubuntu3.3","2.4.42+dfsg-2ubuntu3.4","2.4.42+dfsg-2ubuntu3.5","2.4.42+dfsg-2ubuntu3.6","2.4.42+dfsg-2ubuntu3.7","2.4.42+dfsg-2ubuntu3.8","2.4.42+dfsg-2ubuntu3.9","2.4.42+dfsg-2ubuntu3.10","2.4.42+dfsg-2ubuntu3.11","2.4.42+dfsg-2ubuntu3.12"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.45+dfsg-1ubuntu1.10"}]}],"versions":["2.4.45+dfsg-1ubuntu1","2.4.45+dfsg-1ubuntu1.1","2.4.45+dfsg-1ubuntu1.2","2.4.45+dfsg-1ubuntu1.3","2.4.45+dfsg-1ubuntu1.4","2.4.45+dfsg-1ubuntu1.5","2.4.45+dfsg-1ubuntu1.6","2.4.45+dfsg-1ubuntu1.7","2.4.45+dfsg-1ubuntu1.8","2.4.45+dfsg-1ubuntu1.9"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49+dfsg-2ubuntu1.7"}]}],"versions":["2.4.48+dfsg-1ubuntu1","2.4.48+dfsg-1ubuntu2","2.4.48+dfsg-1ubuntu3","2.4.48+dfsg-1ubuntu4","2.4.49+dfsg-1ubuntu1","2.4.49+dfsg-2ubuntu1","2.4.49+dfsg-2ubuntu1.2","2.4.49+dfsg-2ubuntu1.3","2.4.49+dfsg-2ubuntu1.4","2.4.49+dfsg-2ubuntu1.5","2.4.49+dfsg-2ubuntu1.6"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.42+dfsg-2ubuntu3.13"}]}],"versions":["2.4.41+dfsg-1ubuntu2","2.4.41+dfsg-1ubuntu3","2.4.42+dfsg-2ubuntu1","2.4.42+dfsg-2ubuntu3","2.4.42+dfsg-2ubuntu3.1","2.4.42+dfsg-2ubuntu3.2","2.4.42+dfsg-2ubuntu3.3","2.4.42+dfsg-2ubuntu3.4","2.4.42+dfsg-2ubuntu3.5","2.4.42+dfsg-2ubuntu3.6","2.4.42+dfsg-2ubuntu3.7","2.4.42+dfsg-2ubuntu3.8","2.4.42+dfsg-2ubuntu3.9","2.4.42+dfsg-2ubuntu3.10","2.4.42+dfsg-2ubuntu3.11","2.4.42+dfsg-2ubuntu3.12"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.45+dfsg-1ubuntu1.10"}]}],"versions":["2.4.45+dfsg-1ubuntu1","2.4.45+dfsg-1ubuntu1.1","2.4.45+dfsg-1ubuntu1.2","2.4.45+dfsg-1ubuntu1.3","2.4.45+dfsg-1ubuntu1.4","2.4.45+dfsg-1ubuntu1.5","2.4.45+dfsg-1ubuntu1.6","2.4.45+dfsg-1ubuntu1.7","2.4.45+dfsg-1ubuntu1.8","2.4.45+dfsg-1ubuntu1.9"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49+dfsg-2ubuntu1.7"}]}],"versions":["2.4.48+dfsg-1ubuntu1","2.4.48+dfsg-1ubuntu2","2.4.48+dfsg-1ubuntu3","2.4.48+dfsg-1ubuntu4","2.4.49+dfsg-1ubuntu1","2.4.49+dfsg-2ubuntu1","2.4.49+dfsg-2ubuntu1.2","2.4.49+dfsg-2ubuntu1.3","2.4.49+dfsg-2ubuntu1.4","2.4.49+dfsg-2ubuntu1.5","2.4.49+dfsg-2ubuntu1.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.31-1+nmu2ubuntu8.5+esm8"}]}],"versions":["2.4.31-1+nmu2ubuntu3","2.4.31-1+nmu2ubuntu4","2.4.31-1+nmu2ubuntu5","2.4.31-1+nmu2ubuntu8","2.4.31-1+nmu2ubuntu8.1","2.4.31-1+nmu2ubuntu8.2","2.4.31-1+nmu2ubuntu8.3","2.4.31-1+nmu2ubuntu8.4","2.4.31-1+nmu2ubuntu8.5","2.4.31-1+nmu2ubuntu8.5+esm1","2.4.31-1+nmu2ubuntu8.5+esm2","2.4.31-1+nmu2ubuntu8.5+esm3","2.4.31-1+nmu2ubuntu8.5+esm4","2.4.31-1+nmu2ubuntu8.5+esm5","2.4.31-1+nmu2ubuntu8.5+esm6","2.4.31-1+nmu2ubuntu8.5+esm7"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-lp152.14.18.1"}]}],"bundled":11}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"openldap","product":"openldap"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://bugs.openldap.org/show_bug.cgi?id=9454","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Vendor Advisory","advisory","report","web"]},{"url":"https://git.openldap.org/openldap/openldap/-/commit/3539fc33212b528c56b716584f2c2994af7c30b0","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","advisory","fix","web"]},{"url":"https://git.openldap.org/openldap/openldap/-/commit/9badb73425a67768c09bcaed1a9c26c684af6c30","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","advisory","fix","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/02/msg00035.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://www.debian.org/security/2021/dsa-4860","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20210319-0005/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-27212","tags":["web","advisory"]},{"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E"},{"url":"https://security.netapp.com/advisory/ntap-20210319-0005"},{"url":"https://github.com/advisories/GHSA-274h-c788-hf3c"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-27212","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-27212","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2021-1637770462.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2021-1638803748.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2022-1646915783.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos7-els/CLSA-2023-1695834945.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1777031791.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1777051819.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-27212","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0105.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=28300","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4724-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4744-1","tags":["advisory"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1119","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210692-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1182279","tags":["report"]},{"url":"https://bugzilla.suse.com/1182408","tags":["report"]},{"url":"https://bugzilla.suse.com/1182411","tags":["report"]},{"url":"https://bugzilla.suse.com/1182412","tags":["report"]},{"url":"https://bugzilla.suse.com/1182413","tags":["report"]},{"url":"https://bugzilla.suse.com/1182415","tags":["report"]},{"url":"https://bugzilla.suse.com/1182416","tags":["report"]},{"url":"https://bugzilla.suse.com/1182417","tags":["report"]},{"url":"https://bugzilla.suse.com/1182418","tags":["report"]},{"url":"https://bugzilla.suse.com/1182419","tags":["report"]},{"url":"https://bugzilla.suse.com/1182420","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-36221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-36222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-36223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-36224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-36225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-36226","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-36227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-36228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-36229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-36230","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-27212","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210693-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210723-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-202114700-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1184020","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-27212","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-27212","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7713-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-36229","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-36230","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/34RGWB6WTBL4BEDA4UXHB5TDLT47DCUY/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-27212","description":"In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.","status":"published","published":"2021-02-14T02:53:26Z","modified":"2026-10-14T11:34:54.513Z","updated_at":"2026-11-02T14:33:04.360272Z"}],"euvd":[{"id":"EUVD-2021-13977","description":"In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.","status":"published","published":"2021-02-14T02:53:26Z","modified":"2026-10-14T11:34:54Z","updated_at":"2026-11-02T17:27:16.356399Z"}],"ghsa":[{"id":"GHSA-274h-c788-hf3c","title":"In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur...","description":"In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.","status":"published","published":"2022-05-24T17:42:08Z","modified":"2026-10-14T12:32:23Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T15:13:24.188405Z"}],"nvd":[{"id":"CVE-2021-27212","description":"In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.","status":"published","published":"2021-02-14T03:15:12.957Z","modified":"2026-10-14T12:17:09.847Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T14:06:50.031227Z"}],"osv":[{"id":"ALPINE-CVE-2021-27212","description":"In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.","status":"published","published":"2021-02-14T03:15:12.957Z","modified":"2026-10-23T17:17:56.164708897Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:48.646074Z"},{"id":"AZL-6771","title":"CVE-2021-27212 affecting package openldap for versions less than 2.4.57-5","description":"In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.","status":"published","published":"2021-02-14T03:15:12Z","modified":"2026-04-21T04:38:14.713872Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:08.630357Z"},{"id":"BELL-CVE-2021-27212","title":"CVE-2021-27212 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:58.383919Z","modified":"2026-03-05T07:15:26.49982Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2021-27212","description":"In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.","status":"published","published":"2021-02-14T03:15:12.957Z","modified":"2026-11-02T02:45:55.255225245Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:18.778776Z"},{"id":"DEBIAN-CVE-2021-27212","description":"In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.","status":"published","published":"2021-02-14T03:15:12.957Z","modified":"2026-10-15T09:47:41.204092809Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:34.94143Z"},{"id":"JLSEC-2026-173","description":"In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to `schema_init.c` and checkTime.","status":"published","published":"2026-04-21T00:04:14.628Z","modified":"2026-07-25T18:24:03.589791665Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.159338Z"},{"id":"OESA-2021-1119","title":"openldap security update","description":"OpenLDAP is an open source suite of LDAP (Lightweight Directory Access Protocol) applications and development tools. LDAP is a set of protocols for accessing directory services (usually phone book style information, but other information is possible) over the Internet, similar to the way DNS (Domain Name System) information is propagated over the Internet. The openldap package contains configuration files, libraries, and documentation for OpenLDAP.\r\n\r\nSecurity Fix(es):\r\n\r\nIn OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.(CVE-2021-27212)","status":"published","published":"2021-04-07T11:04:21Z","modified":"2026-08-18T01:15:23.121412326Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"UBUNTU-CVE-2021-27212","description":"In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.","status":"published","published":"2021-02-14T03:15:00Z","modified":"2026-04-22T12:49:48.22918Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:26.779273Z"},{"id":"BIT-openldap-2021-27212","description":"In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.","status":"published","published":"2024-03-06T11:00:07.978Z","modified":"2026-09-08T08:48:16.699807072Z","updated_at":"2026-11-02T15:28:34.343258Z"},{"id":"CLSA-2021-1637770462","title":"Fixed CVE-2021-27212 in openldap","description":"- CVE-2021-27212: fix DoS via malicious packet","status":"published","published":"2021-11-24T16:14:22Z","modified":"2026-06-01T00:33:24.412157643Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2021-1638803748","title":"Fix of CVE: CVE-2021-27212","description":"- CVE-2021-27212: fix DoS via malicious packet","status":"published","published":"2021-12-06T15:15:48Z","modified":"2026-06-01T00:32:15.006024258Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2022-1646915783","title":"Fix of CVE: CVE-2021-27212","description":"- CVE-2021-27212: a malicious packet can force OpenLDAP to fail an assertion and crash","status":"published","published":"2022-03-10T12:36:23Z","modified":"2026-06-01T00:33:10.512917953Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2023-1695834945","title":"openldap: Fix of 2 CVEs","description":"- CVE-2022-29155: fix a SQL injection vulnerability in the back-sql backend\n  to slapd\n- CVE-2021-27212: fix denial of service (daemon exit) via a short timestamp\n  if slapd is used","status":"published","published":"2023-09-27T17:15:49Z","modified":"2026-10-21T10:47:53.042902902Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2026-1777031791","title":"openldap: Fix of 2 CVEs","description":"- CVE-2022-29155: fix a SQL injection vulnerability in the back-sql backend\n  to slapd\n- CVE-2021-27212: fix denial of service (daemon exit) via a short timestamp\n  if slapd is used","status":"published","published":"2026-04-24T11:56:36Z","modified":"2026-10-21T10:48:02.826376223Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1777051819","title":"openldap: Fix of 2 CVEs","description":"- CVE-2022-29155: fix a SQL injection vulnerability in the back-sql backend\n  to slapd\n- CVE-2021-27212: fix denial of service (daemon exit) via a short timestamp\n  if slapd is used","status":"published","published":"2026-04-25T11:28:41Z","modified":"2026-10-21T10:48:14.169011778Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"DLA-2574-1","title":"openldap - security update","status":"published","published":"2021-02-21T00:00:00Z","modified":"2026-03-09T01:18:39.760068Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-4860-1","title":"openldap - security update","status":"published","published":"2021-02-20T00:00:00Z","modified":"2026-03-09T02:09:49.643399Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2021-0105","title":"Updated openldap packages fix security vulnerabilities","description":"It was discovered that OpenLDAP incorrectly handled Certificate Exact\nAssertion processing. A remote attacker could possibly use this issue to cause\nOpenLDAP to crash, resulting in a denial of service (CVE-2020-36221).\n\nIt was discovered that OpenLDAP incorrectly handled saslAuthzTo processing. A\nremote attacker could use this issue to cause OpenLDAP to crash, resulting in\na denial of service, or possibly execute arbitrary code (CVE-2020-36222,\nCVE-2020-36224, CVE-2020-36225, CVE-2020-36226).\n\nIt was discovered that OpenLDAP incorrectly handled Return Filter control\nhandling. A remote attacker could use this issue to cause OpenLDAP to crash,\nresulting in a denial of service, or possibly execute arbitrary code\n(CVE-2020-36223).\n\nIt was discovered that OpenLDAP incorrectly handled certain cancel operations.\nA remote attacker could possibly use this issue to cause OpenLDAP to crash,\nresulting in a denial of service (CVE-2020-36227).\n\nIt was discovered that OpenLDAP incorrectly handled Certificate List Extract\nAssertion processing. A remote attacker could possibly use this issue to cause\nOpenLDAP to crash, resulting in a denial of service (CVE-2020-36228).\n\nIt was discovered that OpenLDAP incorrectly handled X.509 DN parsing. A remote\nattacker could possibly use this issue to cause OpenLDAP to crash, resulting\nin a denial of service (CVE-2020-36229, CVE-2020-36230).\n\nPasi Saarinen discovered that OpenLDAP incorrectly handled certain short\ntimestamps. A remote attacker could possibly use this issue to cause OpenLDAP\nto crash, resulting in a denial of service (CVE-2021-27212).\n","status":"published","published":"2021-03-04T16:53:32Z","modified":"2026-04-16T04:44:36.319605859Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2021:0408-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\n- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the\n  X.509 DN parsing in decode.c ber_next_element, resulting in denial\n  of service.\n- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN\n  parsing in ad_keystring, resulting in denial of service.\n- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash\n  in the Certificate List Exact Assertion processing, resulting in\n  denial of service.\n- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the\n  cancel_extop Cancel operation, resulting in denial of service.\n- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the\n  saslAuthzTo processing, resulting in denial of service.\n- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash\n  in the saslAuthzTo processing, resulting in denial of service.\n- bsc#1182415 CVE-2020-36226 - memch-\u003ebv_len miscalculation and slapd\n  crash in the saslAuthzTo processing, resulting in denial of service.\n- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the\n  saslAuthzTo validation, resulting in denial of service.\n- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact\n  Assertion processing, resulting in denial of service (schema_init.c\n  serialNumberAndIssuerCheck).\n- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter\n  control handling, resulting in denial of service (double free and\n  out-of-bounds read).\n- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur\n    in the issuerAndThisUpdateCheck function via a crafted packet,\n    resulting in a denial of service (daemon exit) via a short timestamp.\n    This is related to schema_init.c and checkTime.\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-03-14T14:10:26Z","modified":"2025-05-07T18:12:07.959833Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"SUSE-SU-2021:0692-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\n- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the\n  X.509 DN parsing in decode.c ber_next_element, resulting in denial\n  of service.\n- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN\n  parsing in ad_keystring, resulting in denial of service.\n- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash\n  in the Certificate List Exact Assertion processing, resulting in\n  denial of service.\n- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the\n  cancel_extop Cancel operation, resulting in denial of service.\n- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the\n  saslAuthzTo processing, resulting in denial of service.\n- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash\n  in the saslAuthzTo processing, resulting in denial of service.\n- bsc#1182415 CVE-2020-36226 - memch-\u003ebv_len miscalculation and slapd\n  crash in the saslAuthzTo processing, resulting in denial of service.\n- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the\n  saslAuthzTo validation, resulting in denial of service.\n- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact\n  Assertion processing, resulting in denial of service (schema_init.c\n  serialNumberAndIssuerCheck).\n- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter\n  control handling, resulting in denial of service (double free and\n  out-of-bounds read).\n- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur\n    in the issuerAndThisUpdateCheck function via a crafted packet,\n    resulting in a denial of service (daemon exit) via a short timestamp.\n    This is related to schema_init.c and checkTime.\n","status":"published","published":"2021-03-03T17:11:47Z","modified":"2026-02-04T03:40:15.356512Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0693-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\n- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the\n  X.509 DN parsing in decode.c ber_next_element, resulting in denial\n  of service.\n- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN\n  parsing in ad_keystring, resulting in denial of service.\n- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash\n  in the Certificate List Exact Assertion processing, resulting in\n  denial of service.\n- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the\n  cancel_extop Cancel operation, resulting in denial of service.\n- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the\n  saslAuthzTo processing, resulting in denial of service.\n- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash\n  in the saslAuthzTo processing, resulting in denial of service.\n- bsc#1182415 CVE-2020-36226 - memch-\u003ebv_len miscalculation and slapd\n  crash in the saslAuthzTo processing, resulting in denial of service.\n- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the\n  saslAuthzTo validation, resulting in denial of service.\n- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact\n  Assertion processing, resulting in denial of service (schema_init.c\n  serialNumberAndIssuerCheck).\n- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter\n  control handling, resulting in denial of service (double free and\n  out-of-bounds read).\n- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur\n    in the issuerAndThisUpdateCheck function via a crafted packet,\n    resulting in a denial of service (daemon exit) via a short timestamp.\n    This is related to schema_init.c and checkTime.\n","status":"published","published":"2021-03-03T17:13:44Z","modified":"2026-02-04T02:56:49.923587Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0723-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\n- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the\n  X.509 DN parsing in decode.c ber_next_element, resulting in denial\n  of service.\n- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN\n  parsing in ad_keystring, resulting in denial of service.\n- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash\n  in the Certificate List Exact Assertion processing, resulting in\n  denial of service.\n- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the\n  cancel_extop Cancel operation, resulting in denial of service.\n- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the\n  saslAuthzTo processing, resulting in denial of service.\n- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash\n  in the saslAuthzTo processing, resulting in denial of service.\n- bsc#1182415 CVE-2020-36226 - memch-\u003ebv_len miscalculation and slapd\n  crash in the saslAuthzTo processing, resulting in denial of service.\n- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the\n  saslAuthzTo validation, resulting in denial of service.\n- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact\n  Assertion processing, resulting in denial of service (schema_init.c\n  serialNumberAndIssuerCheck).\n- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter\n  control handling, resulting in denial of service (double free and\n  out-of-bounds read).\n- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur\n    in the issuerAndThisUpdateCheck function via a crafted packet,\n    resulting in a denial of service (daemon exit) via a short timestamp.\n    This is related to schema_init.c and checkTime.\n","status":"published","published":"2021-03-08T15:46:34Z","modified":"2026-02-04T02:24:12.353403Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:14700-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\n- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the\n  X.509 DN parsing in decode.c ber_next_element, resulting in denial\n  of service.\n- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN\n  parsing in ad_keystring, resulting in denial of service.\n- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash\n  in the Certificate List Exact Assertion processing, resulting in\n  denial of service.\n- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the\n  cancel_extop Cancel operation, resulting in denial of service.\n- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the\n  saslAuthzTo processing, resulting in denial of service.\n- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash\n  in the saslAuthzTo processing, resulting in denial of service.\n- bsc#1182415 CVE-2020-36226 - memch-\u003ebv_len miscalculation and slapd\n  crash in the saslAuthzTo processing, resulting in denial of service.\n- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the\n  saslAuthzTo validation, resulting in denial of service.\n- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact\n  Assertion processing, resulting in denial of service (schema_init.c\n  serialNumberAndIssuerCheck).\n- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter\n  control handling, resulting in denial of service (double free and\n  out-of-bounds read).\n- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur\n    in the issuerAndThisUpdateCheck function via a crafted packet,\n    resulting in a denial of service (daemon exit) via a short timestamp.\n    This is related to schema_init.c and checkTime.\n- resynchronise changelogs with subpackages (bsc#1184020).\n","status":"published","published":"2021-04-16T09:42:39Z","modified":"2026-02-04T02:21:20.033027Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"USN-4744-1","title":"openldap vulnerability","description":"Pasi Saarinen discovered that OpenLDAP incorrectly handled certain short\ntimestamps. A remote attacker could possibly use this issue to cause\nOpenLDAP to crash, resulting in a denial of service.\n","status":"published","published":"2021-02-22T14:22:08Z","modified":"2026-04-22T10:11:19.868927Z","updated_at":"2026-11-02T16:58:15.159055Z"},{"id":"USN-7713-1","title":"openldap vulnerabilities","description":"It was discovered that OpenLDAP incorrectly handled X.509 DN parsing. A\nremote attacker could possibly use this issue to cause OpenLDAP to crash,\nresulting in a denial of service. (CVE-2020-36229, CVE-2020-36230)\n\nPasi Saarinen discovered that OpenLDAP incorrectly handled certain short\ntimestamps. A remote attacker could possibly use this issue to cause\nOpenLDAP to crash, resulting in a denial of service. (CVE-2021-27212)","status":"published","published":"2025-08-24T22:57:14Z","modified":"2026-04-22T11:01:52.469137Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}