IM
IronMonkey Threat Research

CVE-2021-27212 HIGH

Published: 2021-02-14 | Last Modified: 2024-11-21 | Status: Modified

Description

In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.

Additional Descriptions (1)

En OpenLDAP versiones hasta 2.4.57 y versiones 2.5.x hasta 2.5.1alpha, puede ocurrir un fallo de aserción en slapd en la función issuerAndThisUpdateCheck por medio de un paquete diseñado, resultando en una denegación de servicio (salida del demonio) por medio de una marca de tiempo corta. Esto está relacionado con el archivo schema_init.c y checkTime

CVSS Metrics

Base Score: 7.5 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 3.6

Base Score: 5.0 (MEDIUM)

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access VectorNETWORK
Access ComplexityLOW
AuthenticationNONE
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactPARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 2.9

Weaknesses

Source Type Description
[email protected] Primary
en CWE-617

Affected Products

Vendor Product Version Update Type
openldap openldap * <built-in method update of dict object at 0x7fd36a002240> Application
openldap openldap 2.5.0 <built-in method update of dict object at 0x7fd36a002d40> Application
openldap openldap 2.5.1 <built-in method update of dict object at 0x7fd39c4cd540> Application
debian debian_linux 9.0 <built-in method update of dict object at 0x7fd39f918880> Operating System
debian debian_linux 10.0 <built-in method update of dict object at 0x7fd36a000040> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:openldap:openldap:2.5.0:alpha:*:*:*:*:*:*
Yes cpe:2.3:a:openldap:openldap:2.5.1:alpha:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

References