Read the docs
TI-2002-01302 Aliases CVE-2002-1379GHSA-63p4-p8mv-xhx7

OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows remote or local attackers to execute…

Priority LOW 38Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows remote or local attackers to execute arbitrary code when libldap reads the .ldaprc file within applications that are running with extra privileges.

Why it matters now

EPSS 0.02912 87th percentileScored 2026-11-07
Fix Fixed Red Hat: 3 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:*up to 2.2.0Vulnerableopenldap
  • cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:* Versions up to 2.2.0 Vulnerable ·openldap

Remediation

Red Hat 3 advisories

  • RHSA-2003:208 Released 2003-07-07 · Red Hat rating Critical
    : : : Updated openldap packages available for iSeries and pSeries
    • Red Hat Linux 7.1
  • RHSA-2003:040 Released 2003-02-06 · Red Hat rating Critical
    : Updated openldap packages available
    • Red Hat Linux 6.2
    • Red Hat Linux 7.0
    • Red Hat Linux 7.1
    • Red Hat Linux 7.2
    • Red Hat Linux 7.3
    • Red Hat Linux 8.0
  • RHSA-2002:312 Released 2003-01-15 · Red Hat rating Critical
    openldap security update
    • Red Hat Enterprise Linux AS (Advanced Server) version 2.1
    • Red Hat Linux Advanced Workstation 2.1

Vendor assessments

Red Hat

Red Hat rating: Critical. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 Fixed RHSA-2002:312
Red Hat Linux 6.2Fixed RHSA-2003:040
Red Hat Linux 7.0Fixed RHSA-2003:040
Red Hat Linux 7.1Fixed RHSA-2003:040
Red Hat Linux 7.2Fixed RHSA-2003:040
Red Hat Linux 7.3Fixed RHSA-2003:040
Red Hat Linux 8.0Fixed RHSA-2003:040
Red Hat Linux Advanced Workstation 2.1Fixed RHSA-2002:312

Timeline

  1. 2026-10-02 Threatist record created from CVE-2002-1379
  2. 2026-10-03 Alias added: GHSA-63p4-p8mv-xhx7

References

Patch 1

Advisory 2

  • TI-2022-11700 In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability… CVSS 3.1CRITICAL 9.8
  • TI-2020-18548 An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in… CVSS 3.1HIGH 7.5
  • TI-2020-18541 An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in… CVSS 3.1HIGH 7.5
  • TI-2020-18547 A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with… CVSS 3.1HIGH 7.5
  • TI-2020-18542 A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd… CVSS 3.1HIGH 7.5
  • TI-2006-05563 OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon… CVSS 3.1HIGH 7.5
See all 58 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences