GHSA-r8wq-qrxc-hmcm | Vulnetix

GHSA-r8wq-qrxc-hmcm PUBLISHED CVSS 6.5 MEDIUM

ReDoS in LDAP schema parser

Risk Scores

CVSS 3.1

6.5

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
PyPI	python-ldap	0
PyPI	python-ldap	0, 2.3.13, 2.4.0

Timeline

Nov 26, 2021 CVE Updated
Nov 29, 2021 CVE Published

References

https://github.com/python-ldap/python-ldap product
GitHub Advisory GHSA-r8wq-qrxc-hmcm vendor-advisory
https://github.com/python-ldap/python-ldap/security/advisories/GHSA-r8wq-qrxc-hmcm url
https://github.com/python-ldap/python-ldap/issues/424 discussion

Open in Interactive Console →

$ Console Community · 50/day Open console ›