[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMxcx7pvXKz_3u9u-KgxywNRDfEIaEj7_EJyBtG-XW3k":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":25,"kevVulnerabilities":80,"topProductsByCves":81,"seoMetadata":84,"meta":93},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":24},22973,"openldap",2,61,0,234,"2023-05-30","o",[16,19],{"id":17,"product_name":8,"version_count":12,"cve_count":18,"kev_count":11,"last_cve_update":13},123049,60,{"id":20,"product_name":21,"version_count":11,"cve_count":22,"kev_count":11,"last_cve_update":23},123050,"openldap-servers",1,"2017-07-17","Openldap is a technology vendor with 2 tracked products and 61 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[26,35,38,42,45,50,55,62,67,75],{"cveId":27,"description":28,"publishedDate":29,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":33,"epssScore":34},"CVE-2020-36221","An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).","2021-01-26",7.5,"v3.1","High",false,0.84994,{"cveId":36,"description":37,"publishedDate":29,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":33,"epssScore":34},"CVE-2020-36228","An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service.",{"cveId":39,"description":40,"publishedDate":29,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":33,"epssScore":41},"CVE-2020-36227","A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.",0.77236,{"cveId":43,"description":44,"publishedDate":29,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":33,"epssScore":41},"CVE-2020-36222","A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.",{"cveId":46,"description":47,"publishedDate":48,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":33,"epssScore":49},"CVE-2006-5779","OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via LDAP BIND requests with long authcid names, which triggers an assertion failure.","2006-11-07",0.76861,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":33,"epssScore":54},"CVE-2021-27212","In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.","2021-02-14",0.66114,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":31,"severity":60,"isKev":33,"epssScore":61},"CVE-2022-29155","In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.","2022-05-04",9.8,"Critical",0.64487,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":59,"cvssVersion":31,"severity":60,"isKev":33,"epssScore":66},"CVE-2010-0211","The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN string containing invalid UTF-8 sequences, which triggers a free of an invalid, uninitialized pointer in the slap_mods_free function, as demonstrated using the Codenomicon LDAPv3 test suite.","2010-07-28",0.28472,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":72,"severity":73,"isKev":33,"epssScore":74},"CVE-2015-6908","The ber_get_next function in libraries\u002Fliblber\u002Fio.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd.","2015-09-11",5,"v2","Medium",0.19984,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":71,"cvssVersion":72,"severity":73,"isKev":33,"epssScore":79},"CVE-2011-1081","modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service (daemon crash) via a relative Distinguished Name (DN) modification request (aka MODRDN operation) that contains an empty value for the OldDN field.","2011-03-20",0.14474,[],[82,83],{"id":17,"product_name":8,"version_count":12,"cve_count":18,"kev_count":11,"last_cve_update":13},{"id":20,"product_name":21,"version_count":11,"cve_count":22,"kev_count":11,"last_cve_update":23},{"title":85,"metaDescription":86,"keywords":87,"structuredData":88},"Openldap - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Openldap covering 2 products with 61 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Openldap vulnerabilities, Openldap security, Openldap CVE, Openldap threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":89,"@type":90,"name":91,"description":86,"url":92},"https:\u002F\u002Fschema.org","Organization","Openldap","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fopenldap",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":94,"apiVersion":95},"2026-10-17T14:58:44.907Z","3.0"]