Medium USN-5508-1 1 CVE

python-ldap vulnerability

Published Jul 11, 2022 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Python LDAP incorrectly handled certain regular expressions.
An remote attacker could possibly use this issue to cause a denial of service.

Fixed packages 3

Release	Package	Fixed in
Ubuntu · 18.04 LTS 18.04:LTS	python-ldap	3.0.0-1ubuntu0.2
Ubuntu · 20.04 LTS 20.04:LTS	python-ldap	3.2.0-4ubuntu2.1
Ubuntu · 22.04 LTS 22.04:LTS	python-ldap	3.2.0-4ubuntu7.1

Vulnerabilities 1

Medium 6.5

CVE-2021-46823

Denial of Service in python-ldap

python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regular expression denial of service (ReDoS) flaw in the LDAP schema parser. By sending crafted regex input, a remote authent…

python-ldap python-ldap python-ldap python-ldap Debian Ubuntu Azure Linux PyPI

Jun 18, 2022

References

report
https://ubuntu.com/security/CVE-2021-46823