What is GHSA-r8wq-qrxc-hmcm?

GHSA-r8wq-qrxc-hmcm is a security advisory published by GitHub Security Advisories with Medium severity. ReDoS in LDAP schema parser

Why does GHSA-r8wq-qrxc-hmcm have no CVE ID yet?

GitHub Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

What is the CVSS v3 score of GHSA-r8wq-qrxc-hmcm?

GHSA-r8wq-qrxc-hmcm has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

Which products are affected by GHSA-r8wq-qrxc-hmcm?

GHSA-r8wq-qrxc-hmcm affects 1 product, including: pip/python-ldap:\u003c 3.4.0.

GHSA-r8wq-qrxc-hmcmMediumCVSS 6.5Disclosed before NVD

ReDoS in LDAP schema parser

Vendor

GitHub Security Advisories

Published

November 29, 2021

Last Modified

January 9, 2023

📋 Description

https://github.com/python-ldap/python-ldap/issues/424

Impact

The LDAP schema parser of python-ldap 3.3.1 and earlier are vulnerable to a regular expression denial-of-service attack. The issue affects clients that use ldap.schema package to parse LDAP schema definitions from an untrusted source.

Patches

The upcoming release of python-ldap 3.4.0 will contain a workaround to prevent ReDoS attacks. The schema parser refuses schema definitions with an excessive amount of backslashes.

Workarounds

As a workaround, users can check input for excessive amount of backslashes in schemas. More than a dozen backslashes per line are atypical.

References

CWE-1333

For more information

If you have any questions or comments about this advisory:

Open an issue in python-ldap tracker

🎯 Affected products1

pip/python-ldap:< 3.4.0