CVE-2021-27212: Debian Linux

High severity, CVSS 7.5. EPSS: 63.3% chance of exploitation in the next 30 days.

In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.

Affected products

• Debian Debian Linux: version 9.0 only; version 10.0 only
• Openldap Openldap: up to and including 2.4.57; version 2.5.0 only; version 2.5.1 only

Published 2021-02-14. Last modified 2026-06-17.