CVE-2025-27497

OpenDJ is an LDAPv3 compliant directory service. OpenDJ prior to 4.9.3 contains a denial-of-service (DoS) vulnerability that causes the server to become unresponsive to all LDAP requests without crashing or restarting. This issue occurs when an alias loop exists in the LDAP database. If an ldapsearch request is executed with alias dereferencing set to "always" on this alias entry, the server stops responding to all future requests. Fortunately, the server can be restarted without data corruption. This vulnerability is fixed in 4.9.3.

• CWE-835

• https://github.com/OpenIdentityPlatform/OpenDJ/commit/08aee4724608e4a32baa3c7d7499ec913a275aaf
• https://github.com/OpenIdentityPlatform/OpenDJ/security/advisories/GHSA-93qr-h8pr-4593

Published

Mar 5, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-27491Use after free in Windows Hyper-V allows an authorized attac…7.1
• CVE-2025-27492Concurrent execution using shared resource with improper syn…7
• CVE-2025-27493A vulnerability has been identified in SiPass integrated AC5…6.7
• CVE-2025-27494A vulnerability has been identified in SiPass integrated AC5…7.2
• CVE-2025-27495A vulnerability has been identified in TeleControl Server Ba…9.8
• CVE-2025-27496Snowflake, a platform for using artificial intelligence in t…3.3
• CVE-2025-27498aes-gcm is a pure Rust implementation of the AES-GCM. In dec…5.6
• CVE-2025-27499WeGIA is an open source Web Manager for Institutions with a …6.1
• CVE-2025-2750A vulnerability, which was classified as critical, was found…8.8
• CVE-2025-27500OpenZiti is a free and open source project focused on bringi…6.1
• CVE-2025-27501OpenZiti is a free and open source project focused on bringi…8.6
• CVE-2025-27505GeoServer is an open source server that allows users to shar…5.3