CVE-2021-46823 describes a Regular Expression Denial of Service (ReDoS) vulnerability in python-ldap versions prior to 3.4.0, specifically when the ldap.schema module processes untrusted schema definitions. A remote, authenticated attacker can exploit this flaw by sending crafted regex input, leading to a denial of service condition. The vulnerability is rated Medium severity (CVSS 6.5), requiring network access and low privileges, with a high impact on availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 3.4.0CPE matchmatch criteria | cpe:2.3:a:python-ldap:python-ldap:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Denial of Service in python-ldap
Jun 19, 2022python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions because of a regular expression denial of service (ReDoS) flaw in the LDAP schema parser. By sending crafted regex input a remote authenticated attacker could exploit this vulnerability to cause a denial of service condition.
Jun 14, 2022python-ldap: Regular expression denial of service in LDAP schema parser
Jan 18, 2022