CVE-2021-27212: High severity red hat openldap servers vulnerability
In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schemainit.c and checkTime.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-27212?
CVE-2021-27212 is a vulnerability in OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha that can lead to a denial of service via a crafted packet.
How severe is CVE-2021-27212?
CVE-2021-27212 has a severity rating of 7.5 (high).
Which software versions are affected by CVE-2021-27212?
OpenLDAP versions 2.4.57 and 2.5.x through 2.5.1alpha are affected by CVE-2021-27212.
How can I fix CVE-2021-27212?
To fix CVE-2021-27212, you should upgrade to OpenLDAP version 2.4.58 or 2.5.2 (or a later stable release).
Where can I find more information about CVE-2021-27212?
You can find more information about CVE-2021-27212 on the OpenLDAP bug tracker and the corresponding Git commits.