Denial of Service Vulnerability in Python-LDAP by OpenLDAP

CVE-2021-46823

What is CVE-2021-46823?

The python-ldap library, when used with untrusted schema definitions, is vulnerable to a denial of service due to a flaw in its LDAP schema parser. This vulnerability stems from a regular expression denial of service (ReDoS) issue that can be exploited by sending specially crafted regex inputs. A remote authenticated attacker could leverage this flaw to disrupt services, resulting in denial of access to legitimate users.

References