[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMxcx7pvXKz_3u9u-KgxywNRDfEIaEj7_EJyBtG-XW3k":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":25,"kevVulnerabilities":81,"topProductsByCves":82,"seoMetadata":85,"meta":94},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":24},22973,"openldap",2,61,0,234,"2023-05-30","o",[16,19],{"id":17,"product_name":8,"version_count":12,"cve_count":18,"kev_count":11,"last_cve_update":13},123049,60,{"id":20,"product_name":21,"version_count":11,"cve_count":22,"kev_count":11,"last_cve_update":23},123050,"openldap-servers",1,"2017-07-17","Openldap is a technology vendor with 2 tracked products and 61 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[26,35,39,43,46,51,58,63,68,76],{"cveId":27,"description":28,"publishedDate":29,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":33,"epssScore":34},"CVE-2020-36221","An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).","2021-01-26",7.5,"v3.1","High",false,0.84224,{"cveId":36,"description":37,"publishedDate":29,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":33,"epssScore":38},"CVE-2020-36228","An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service.",0.83381,{"cveId":40,"description":41,"publishedDate":29,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":33,"epssScore":42},"CVE-2020-36222","A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.",0.77738,{"cveId":44,"description":45,"publishedDate":29,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":33,"epssScore":42},"CVE-2020-36227","A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.",{"cveId":47,"description":48,"publishedDate":49,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":33,"epssScore":50},"CVE-2006-5779","OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via LDAP BIND requests with long authcid names, which triggers an assertion failure.","2006-11-07",0.75373,{"cveId":52,"description":53,"publishedDate":54,"cvssScore":55,"cvssVersion":31,"severity":56,"isKev":33,"epssScore":57},"CVE-2022-29155","In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.","2022-05-04",9.8,"Critical",0.69899,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":33,"epssScore":62},"CVE-2021-27212","In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.","2021-02-14",0.64147,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":55,"cvssVersion":31,"severity":56,"isKev":33,"epssScore":67},"CVE-2010-0211","The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN string containing invalid UTF-8 sequences, which triggers a free of an invalid, uninitialized pointer in the slap_mods_free function, as demonstrated using the Codenomicon LDAPv3 test suite.","2010-07-28",0.29238,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":72,"cvssVersion":73,"severity":74,"isKev":33,"epssScore":75},"CVE-2015-6908","The ber_get_next function in libraries\u002Fliblber\u002Fio.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd.","2015-09-11",5,"v2","Medium",0.19984,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":72,"cvssVersion":73,"severity":74,"isKev":33,"epssScore":80},"CVE-2011-1081","modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service (daemon crash) via a relative Distinguished Name (DN) modification request (aka MODRDN operation) that contains an empty value for the OldDN field.","2011-03-20",0.13518,[],[83,84],{"id":17,"product_name":8,"version_count":12,"cve_count":18,"kev_count":11,"last_cve_update":13},{"id":20,"product_name":21,"version_count":11,"cve_count":22,"kev_count":11,"last_cve_update":23},{"title":86,"metaDescription":87,"keywords":88,"structuredData":89},"Openldap - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Openldap covering 2 products with 61 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Openldap vulnerabilities, Openldap security, Openldap CVE, Openldap threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":90,"@type":91,"name":92,"description":87,"url":93},"https:\u002F\u002Fschema.org","Organization","Openldap","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fopenldap",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":95,"apiVersion":96},"2026-10-28T15:29:06.582Z","3.0"]