HIGH

GHSA-qcxq-75wr-5cm8

ldap3_proto has LDAP Filter stack exhaustion

Details

### Impact LDAP queries are not validated for depth, which can cause the parser (both PEG and ASN) to exhaust the stack. This *may* cause a denial of service in applications that process queries.

### Workarounds N/A

### References Related to GHSA-r5fr-9gmv-jggh

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io / ldap3_proto

Introduced in: 0 Fixed in: 0.7.1

Upgrade ldap3_proto to 0.7.1 or newer (ecosystem crates.io).

References

https://github.com/kanidm/ldap3/security/advisories/GHSA-qcxq-75wr-5cm8 [WEB]
https://github.com/advisories/GHSA-r5fr-9gmv-jggh [ADVISORY]
https://github.com/kanidm/ldap3 [PACKAGE]