CVE-2021-46823: Python-LDAP

Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days.

python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regular expression denial of service (ReDoS) flaw in the LDAP schema parser. By sending crafted regex input, a remote authenticated attacker could exploit this vulnerability to cause a denial of service condition.

Affected products

• Python-LDAP Python-LDAP: before 3.4.0 (fixed in 3.4.0)

Published 2022-06-18. Last modified 2026-06-17.