Findings

CVE-2021-27212

In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulti…

Published Feb 14, 2021 · updated Oct 14, 2026 · openldap openldap

In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Feb 14, 2021 · NIST NVD

    Detected

    In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.

  2. Oct 14, 2026 · NIST NVD

    Updated

    In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.

Affected

  • cpe debian/debian linux10.0
  • cpe debian/debian linux9.0
  • cpe openldap/openldapversion unspecified
  • cpe openldap/openldap2.5.0
  • cpe openldap/openldap2.5.1

Sources

  • CVE.orgVulnerability recordCVE-2021-27212

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2021-27212

    30-day exploitation probability 66.1%

    first.org
  • NIST NVDVulnerability recordCVE-2021-27212

    In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.

    nvd.nist.gov

References