CVE-2021-27212

In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.

• CWE-617

• https://bugs.openldap.org/show_bug.cgi?id=9454Exploit, Issue Tracking, Vendor Advisory
• https://git.openldap.org/openldap/openldap/-/commit/3539fc33212b528c56b716584f2c2994af7c30b0Patch, Vendor Advisory
• https://git.openldap.org/openldap/openldap/-/commit/9badb73425a67768c09bcaed1a9c26c684af6c30Patch, Vendor Advisory
• https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
• https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
• https://lists.debian.org/debian-lts-announce/2021/02/msg00035.htmlMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20210319-0005/Third Party Advisory
• https://www.debian.org/security/2021/dsa-4860Third Party Advisory
• https://bugs.openldap.org/show_bug.cgi?id=9454Exploit, Issue Tracking, Vendor Advisory
• https://git.openldap.org/openldap/openldap/-/commit/3539fc33212b528c56b716584f2c2994af7c30b0Patch, Vendor Advisory
• https://git.openldap.org/openldap/openldap/-/commit/9badb73425a67768c09bcaed1a9c26c684af6c30Patch, Vendor Advisory
• https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
• https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
• https://lists.debian.org/debian-lts-announce/2021/02/msg00035.htmlMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20210319-0005/Third Party Advisory
• https://www.debian.org/security/2021/dsa-4860Third Party Advisory

Published

Feb 14, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-27204Telegram before 7.4 (212543) Stable on macOS stores the loca…5.5
• CVE-2021-27205Telegram before 7.4 (212543) Stable on macOS stores the loca…5.5
• CVE-2021-27208When booting a Zync-7000 SOC device from nand flash memory, …6.8
• CVE-2021-27209In the management interface on TP-Link Archer C5v 1.7_181221…7.1
• CVE-2021-27210TP-Link Archer C5v 1.7_181221 devices allows remote attacker…6.5
• CVE-2021-27211steghide 0.5.1 relies on a certain 32-bit seed value, which …7.5
• CVE-2021-27213config.py in pystemon before 2021-02-13 allows code executio…9.8
• CVE-2021-27214A Server-side request forgery (SSRF) vulnerability in the Pr…6.1
• CVE-2021-27215An issue was discovered in genua genugate before 9.0 Z p19, …9.8
• CVE-2021-27216Exim 4 before 4.94.2 has Execution with Unnecessary Privileg…6.3
• CVE-2021-27217An issue was discovered in the _send_secure_msg() function o…4.4
• CVE-2021-27218An issue was discovered in GNOME GLib before 2.66.7 and 2.67…7.5