Home

CVE-2021-20277

Description

A flaw was found in Sambas libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of the LDAP server process handling the request. The highest threat from this vulnerability is to system availability.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
14.905

Associated Vulnerability

VulnerabilityOS Platform
None (USN-4888-1) libldb1_1.2.3-1ubuntu0.2_i386.debLinux
None (USN-4888-1) libldb1_1.2.3-1ubuntu0.2_amd64.debLinux
None (USN-4888-1) libldb1_1.1.24-1ubuntu3.2_i386.debLinux
None (USN-4888-1) libldb1_1.1.24-1ubuntu3.2_amd64.debLinux
None (USN-4888-1) libldb2_2.1.4-2ubuntu0.1_i386.debLinux
None (USN-4888-1) libldb2_2.1.4-2ubuntu0.1_amd64.debLinux
None (USN-4888-1) libldb2_2.0.10-0ubuntu0.20.04.3_i386.debLinux
None (USN-4888-1) libldb2_2.0.10-0ubuntu0.20.04.3_amd64.debLinux
Ldb-tools update (ELSA-2021-1072) ldb-tools-1.5.4-2.el7_9.x86_64.rpmLinux
Libldb update (ELSA-2021-1072) libldb-1.5.4-2.el7_9.i686.rpmLinux
Libldb update (ELSA-2021-1072) libldb-1.5.4-2.el7_9.x86_64.rpmLinux
Libldb-devel update (ELSA-2021-1072) libldb-devel-1.5.4-2.el7_9.i686.rpmLinux
Libldb-devel update (ELSA-2021-1072) libldb-devel-1.5.4-2.el7_9.x86_64.rpmLinux
Pyldb update (ELSA-2021-1072) pyldb-1.5.4-2.el7_9.i686.rpmLinux
Pyldb update (ELSA-2021-1072) pyldb-1.5.4-2.el7_9.x86_64.rpmLinux
Pyldb-devel update (ELSA-2021-1072) pyldb-devel-1.5.4-2.el7_9.i686.rpmLinux
Pyldb-devel update (ELSA-2021-1072) pyldb-devel-1.5.4-2.el7_9.x86_64.rpmLinux
(RHSA-2021:1072) libldb security update ldb-tools-1.5.4-2.el7_9.x86_64.rpmLinux
(RHSA-2021:1072) libldb security update libldb-1.5.4-2.el7_9.i686.rpmLinux
(RHSA-2021:1072) libldb security update libldb-1.5.4-2.el7_9.x86_64.rpmLinux
(RHSA-2021:1072) libldb security update libldb-devel-1.5.4-2.el7_9.i686.rpmLinux
(RHSA-2021:1072) libldb security update libldb-devel-1.5.4-2.el7_9.x86_64.rpmLinux
(RHSA-2021:1072) libldb security update pyldb-1.5.4-2.el7_9.i686.rpmLinux
(RHSA-2021:1072) libldb security update pyldb-1.5.4-2.el7_9.x86_64.rpmLinux
(RHSA-2021:1072) libldb security update pyldb-devel-1.5.4-2.el7_9.i686.rpmLinux
(RHSA-2021:1072) libldb security update pyldb-devel-1.5.4-2.el7_9.x86_64.rpmLinux
(RHSA-2021:1197) libldb security update ldb-tools-2.1.3-3.el8_3.x86_64.rpmLinux
(RHSA-2021:1197) libldb security update libldb-2.1.3-3.el8_3.i686.rpmLinux
(RHSA-2021:1197) libldb security update libldb-2.1.3-3.el8_3.x86_64.rpmLinux
(RHSA-2021:1197) libldb security update libldb-debugsource-2.1.3-3.el8_3.i686.rpmLinux
(RHSA-2021:1197) libldb security update libldb-debugsource-2.1.3-3.el8_3.x86_64.rpmLinux
(RHSA-2021:1197) libldb security update libldb-devel-2.1.3-3.el8_3.i686.rpmLinux
(RHSA-2021:1197) libldb security update libldb-devel-2.1.3-3.el8_3.x86_64.rpmLinux
(RHSA-2021:1197) libldb security update python3-ldb-2.1.3-3.el8_3.i686.rpmLinux
(RHSA-2021:1197) libldb security update python3-ldb-2.1.3-3.el8_3.x86_64.rpmLinux
Ldb-tools update (ELSA-2021-1197) ldb-tools-2.1.3-3.el8_3.x86_64.rpmLinux
Libldb update (ELSA-2021-1197) libldb-2.1.3-3.el8_3.i686.rpmLinux
Libldb update (ELSA-2021-1197) libldb-2.1.3-3.el8_3.x86_64.rpmLinux
Libldb-devel update (ELSA-2021-1197) libldb-devel-2.1.3-3.el8_3.i686.rpmLinux
Libldb-devel update (ELSA-2021-1197) libldb-devel-2.1.3-3.el8_3.x86_64.rpmLinux
Python3-ldb update (ELSA-2021-1197) python3-ldb-2.1.3-3.el8_3.i686.rpmLinux
Python3-ldb update (ELSA-2021-1197) python3-ldb-2.1.3-3.el8_3.x86_64.rpmLinux
SUSE-SU-2021:0944-1(SUSE Linux Enterprise Module for Python2 15-SP3 ) libldb1-1.4.6-3.8.1.x86_64_15_SP3.rpmLinux
SUSE-SU-2021:0944-1(SUSE Linux Enterprise Module for Python2 15-SP3 ) python-ldb-1.4.6-3.8.1.x86_64.rpmLinux
SUSE-SU-2021:0944-1(SUSE Linux Enterprise Module for Python2 15-SP3 ) libldb1-debuginfo-1.4.6-3.8.1.x86_64_15_SP3.rpmLinux
SUSE-SU-2021:0944-1(SUSE Linux Enterprise Module for Python2 15-SP3 ) python-ldb-debuginfo-1.4.6-3.8.1.x86_64.rpmLinux
(RHSA-2021:1072)Important: security update libldb-debuginfo-1.5.4-2.el7_9.i686.rpmLinux
(RHSA-2021:1072)Important: security update libldb-debuginfo-1.5.4-2.el7_9.x86_64.rpmLinux
libldb Security Update (ALAS-2021-1628) pyldb-1.5.4-2.amzn2.i686.rpmLinux
libldb Security Update (ALAS-2021-1628) pyldb-1.5.4-2.amzn2.x86_64.rpmLinux
libldb Security Update (ALAS-2021-1628) libldb-1.5.4-2.amzn2.i686.rpmLinux
libldb Security Update (ALAS-2021-1628) libldb-1.5.4-2.amzn2.x86_64.rpmLinux
libldb Security Update (ALAS-2021-1628) ldb-tools-1.5.4-2.amzn2.x86_64.rpmLinux
libldb Security Update (ALAS-2021-1628) pyldb-devel-1.5.4-2.amzn2.x86_64.rpmLinux
libldb Security Update (ALAS-2021-1628) libldb-devel-1.5.4-2.amzn2.x86_64.rpmLinux
Out-of-bounds Write Vulnerability (CVE-2021-20277)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234