VDB
GHSA-v3qx-x9jr-g987
GHSA-v3qx-x9jr-g987
PUBLISHED
CVSS 7.5 HIGH
Record from GitHub Advisory Database · Published May 24, 2022
In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).
Risk scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Timeline
- May 24, 2022 CVE Published
- Apr 30, 2026 Distribution Patch
- Apr 30, 2026 Security Advisory (2 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-v3qx-x9jr-g987
vulnetix vdb fixes GHSA-v3qx-x9jr-g987Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-v3qx-x9jr-g987/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2020-12243 advisory
- https://bugs.openldap.org/show_bug.cgi?id=9202 url
- https://git.openldap.org/openldap/openldap/-/blob/OPENLDAP_REL_ENG_2_4/CHANGES url
- https://security.netapp.com/advisory/ntap-20200511-0003 url
- https://www.oracle.com/security-alerts/cpuoct2020.html url
- http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00016.html url
- https://git.openldap.org/openldap/openldap/-/commit/98464c11df8247d6a11b52e294ba5dd4f0380440 url
- https://www.oracle.com/security-alerts/cpuapr2022.html url
- https://support.apple.com/kb/HT211289 advisory
- https://usn.ubuntu.com/4352-2 advisory
- https://www.debian.org/security/2020/dsa-4666 advisory
- https://lists.debian.org/debian-lts-announce/2020/05/msg00001.html advisory
- https://usn.ubuntu.com/4352-1 advisory