Description
In versions 3.1.0 and lower of the Splunk Supporting Add-on for Active Directory, also known as SA-ldapsearch, a vulnerable regular expression pattern could lead to a Regular Expression Denial of Service (ReDoS) attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Splunk | Splunk Supporting Add-on for Active Directory | 3.1 – < 3.1.1 | 3.1.1 |
Advisories 1
- WID-SEC-2025-0108 Splunk: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Jan 15, 2025