High · published January 26, 2021
CVSS calls it high at 7.5. It sits in the 99.6th percentile for exploit probability.
A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.
| Product | Versions | Fixed in |
|---|---|---|
| openldap/openldap | < 2.4.57 | 2.4.57 |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| apple/mac_os_x | ≥ 10.14.0, < 10.14.6 | 10.14.6 |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/macos | ≥ 11.1, < 11.4 | 11.4 |