products / openldap

OpenLDAP

OpenLDAP is the dominant open-source LDAP server used as a directory backend for authentication, group membership, and application identity lookups. Deployments run slapd with backends such as MDB, and sometimes experimental modules like back-sql. NVD tracks the product as openldap:openldap. Historical CVEs cluster around filter parsing, SASL authorization identity handling, and backend-specific injection paths that face the network when slapd is exposed.

api usage

Querying OpenLDAP

product slugopenldap

version format2.5.14, 2.6.8, 2.4.57

bash

curl "https://api.attestd.io/v1/check?product=openldap&version=2.5.14" \
  -H "Authorization: Bearer $ATTESTD_KEY"

OpenLDAP 2.5.14 is affected by CVE-2023-2953 (null pointer dereference via a malformed LDAP request). The response returns risk_state: "high" with denial-of-service risk factors and fixed_version: "2.5.16".

json

{
  "product": "openldap",
  "version": "2.5.14",
  "supported": true,
  "risk_state": "none",
  "risk_factors": [],
  "actively_exploited": false,
  "remote_exploitable": false,
  "authentication_required": false,
  "patch_available": false,
  "fixed_version": null,
  "confidence": 0.9,
  "cve_ids": [],
  "cves": null,
  "max_epss": null,
  "last_updated": "2026-08-06T01:32:45.188019Z",
  "supply_chain": null,
  "supply_chain_monitored": false,
  "typosquat": null
}

safe version

OpenLDAP 2.6.8 is a current 2.6 line release past the 2.5.16 fix referenced in the vulnerable example.

bash

curl "https://api.attestd.io/v1/check?product=openldap&version=2.6.8" \
  -H "Authorization: Bearer $ATTESTD_KEY"

notable cves

CVE history

OpenLDAP's high-severity history includes a critical SQL injection in experimental back-sql, repeated unauthenticated DoS crashes in filter and RDN handling, and a SASL security-layer flaw that breaks authorization identity isolation. Operators often patch for availability even when confidentiality impact is low.

CVE	Description	Affects	CVSS
`CVE-2022-29155`	SQL injection in experimental back-sql lets attackers modify SQL via crafted LDAP search or modrdn operations.	≥2.0 <2.5.12 / ≥2.6.0 <2.6.2	9.8
`CVE-2020-12243`	Nested boolean LDAP search filters crash slapd and cause denial of service.	< 2.4.50	7.5
`CVE-2019-13565`	SASL security-layer handling allows authorization identity bypass and unauthorized data access.	≥2.0 ≤2.4.47	7.5
`CVE-2020-25692`	NULL dereference during RDN rename crashes unauthenticated slapd.	< 2.4.55	7.5

KEV = CISA Known Exploited Vulnerabilities catalog. Active exploitation confirmed.

data sources

OpenLDAP CPE namespace

NVD lists OpenLDAP server advisories under one product CPE:

cpe:2.3:a:openldap:openldapslapd and OpenLDAP library CVEs

Attestd maps the openldap slug to this namespace and evaluates version ranges across the 2.4, 2.5, and 2.6 release lines.

All products FreeIPA Keycloak Quickstart