CVE catalog

CVE-2025-61911

Python LDAP vulnerabilities

Severity: Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Published: Oct 10, 2025, 10:02:15 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.32% · Oct 25, 2026

python-ldap is a lightweight directory access protocol (LDAP) client API for Python. In versions prior to 3.4.5, the sanitization method `ldap.filter.escape_filter_chars` can be tricked to skip escaping of special characters when a crafted `list` or `dict` is supplied as the `assertion_value` parameter, and the non-default `escape_mode=1` is configured. The method `ldap.filter.escape_filter_chars` supports 3 different escaping modes. `escape_mode=0` (default) and `escape_mode=2` happen to raise exceptions when a `list` or `dict` object is supplied as the `assertion_value` parameter. However, `escape_mode=1` computes without performing adequate logic to ensure a fully escaped return value. If an application relies on the vulnerable method in the `python-ldap` library to escape untrusted user input, an attacker might be able to abuse the vulnerability to launch ldap injection attacks which could potentially disclose or manipulate ldap data meant to be inaccessible to them. Version 3.4.5 fixes the issue by adding a type check at the start of the `ldap.filter.escape_filter_chars` method to raise an exception when the supplied `assertion_value` parameter is not of type `str`.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	python-ldap	sid	`3.4.8-1`	fixed
Debian	python-ldap	forky	`3.4.8-1`	fixed
Debian	python-ldap	trixie	`3.4.4-1+deb13u1`	fixed
Debian	python-ldap	bookworm	`3.4.3-2+deb12u1`	fixed
Ubuntu	python-ldap	noble	Not reported	vulnerable
Ubuntu	python-ldap	noble	`3.4.4-1ubuntu0.24.04.1`	fixed
Ubuntu	python-ldap-doc	noble	`3.4.4-1ubuntu0.24.04.1`	fixed
Ubuntu	python3-ldap	noble	`3.4.4-1ubuntu0.24.04.1`	fixed
Ubuntu	python3-pyldap	noble	`3.4.4-1ubuntu0.24.04.1`	fixed
Cpe	python-ldap	Not reported	`3.4.5`	fixed
Ubuntu	python-ldap	pro	`3.1.0-2build1`	vulnerable
Ubuntu	python-ldap	pro	`3.1.0-2build2`	vulnerable
Ubuntu	python-ldap	pro	`3.2.0-3`	vulnerable
Ubuntu	python-ldap	pro	`3.2.0-3ubuntu1`	vulnerable
Ubuntu	python-ldap	pro	`3.2.0-3ubuntu2`	vulnerable
Ubuntu	python-ldap	pro	`3.2.0-3ubuntu3`	vulnerable
Ubuntu	python-ldap	pro	`3.2.0-4ubuntu2`	vulnerable
Ubuntu	python-ldap	pro	`3.2.0-4ubuntu2.1`	vulnerable
Ubuntu	python-ldap	pro	`3.2.0-4ubuntu2.1+esm1`	fixed
Ubuntu	python-ldap	22.04	`3.2.0-4ubuntu5`	vulnerable
Ubuntu	python-ldap	22.04	`3.2.0-4ubuntu6`	vulnerable
Ubuntu	python-ldap	22.04	`3.2.0-4ubuntu7`	vulnerable
Ubuntu	python-ldap	22.04	`3.2.0-4ubuntu7.1`	vulnerable
Ubuntu	python-ldap	22.04	`3.2.0-4ubuntu7.2`	fixed
Ubuntu	python-ldap	24.04	`3.4.3-2build2`	vulnerable
Ubuntu	python-ldap	24.04	`3.4.3-2build3`	vulnerable
Ubuntu	python-ldap	24.04	`3.4.3-2ubuntu1`	vulnerable
Ubuntu	python-ldap	24.04	`3.4.4-1`	vulnerable
Ubuntu	python-ldap	24.04	`3.4.4-1build1`	vulnerable
Ubuntu	python-ldap	24.04	`3.4.4-1ubuntu0.24.04.1`	fixed
Ubuntu	python-ldap	25.10	`3.4.4-1build3`	vulnerable
Ubuntu	python-ldap	25.10	`3.4.4-1ubuntu0.25.10.1`	fixed
Suse	python-ldap	linux enterprise server 16.0	`3.4.4-160000.3.1`	fixed
Suse	python-ldap	linux enterprise server for sap applications 16.0	`3.4.4-160000.3.1`	fixed
Opensuse	python-ldap	leap 16.0	`3.4.4-160000.3.1`	fixed
Opensuse	python-ldap	tumbleweed	`3.4.5-1.1`	fixed
Ubuntu	python-ldap	pro	`3.1.0-2build1`	vulnerable
Ubuntu	python-ldap	pro	`3.1.0-2build2`	vulnerable
Ubuntu	python-ldap	pro	`3.2.0-3`	vulnerable
Ubuntu	python-ldap	pro	`3.2.0-3ubuntu1`	vulnerable
Ubuntu	python-ldap	pro	`3.2.0-3ubuntu2`	vulnerable
Ubuntu	python-ldap	pro	`3.2.0-3ubuntu3`	vulnerable
Ubuntu	python-ldap	pro	`3.2.0-4ubuntu2`	vulnerable
Ubuntu	python-ldap	pro	`3.2.0-4ubuntu2.1`	vulnerable
Ubuntu	python-ldap	pro	`3.2.0-4ubuntu2.1+esm1`	fixed
Ubuntu	python-ldap	22.04	`3.2.0-4ubuntu5`	vulnerable
Ubuntu	python-ldap	22.04	`3.2.0-4ubuntu6`	vulnerable
Ubuntu	python-ldap	22.04	`3.2.0-4ubuntu7`	vulnerable
Ubuntu	python-ldap	22.04	`3.2.0-4ubuntu7.1`	vulnerable
Ubuntu	python-ldap	22.04	`3.2.0-4ubuntu7.2`	fixed
Ubuntu	python-ldap	24.04	`3.4.3-2build2`	vulnerable
Ubuntu	python-ldap	24.04	`3.4.3-2build3`	vulnerable
Ubuntu	python-ldap	24.04	`3.4.3-2ubuntu1`	vulnerable
Ubuntu	python-ldap	24.04	`3.4.4-1`	vulnerable
Ubuntu	python-ldap	24.04	`3.4.4-1build1`	vulnerable
Ubuntu	python-ldap	24.04	`3.4.4-1ubuntu0.24.04.1`	fixed
Ubuntu	python-ldap	25.10	`3.4.4-1build3`	vulnerable
Ubuntu	python-ldap	25.10	`3.4.4-1ubuntu0.25.10.1`	fixed
Suse	python-ldap	linux enterprise module for package hub 15 sp6	`3.4.0-150400.3.3.1`	fixed
Opensuse	python-ldap	leap 15.6	`3.4.0-150400.3.3.1`	fixed
Suse	python-ldap	linux enterprise module for package hub 15 sp6	`3.1.0-150100.3.5.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	python-ldap	source	sid	`3.4.5-1`	not yet assigned	Not reported	[1117858]
Debian	python-ldap	source	forky	`3.4.5-1`	not yet assigned	Not reported	[1117858]
Debian	python-ldap	source	trixie	`3.4.4-1+deb13u1`	not yet assigned	Not reported	[1117858]
Debian	python-ldap	source	bookworm	`3.4.3-2+deb12u1`	not yet assigned	Not reported	[1117858]
Ubuntu	python-ldap	deb	noble	`3.4.4-1ubuntu0.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	python-ldap-doc	deb	noble	`3.4.4-1ubuntu0.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	python3-ldap	deb	noble	`3.4.4-1ubuntu0.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	python3-pyldap	deb	noble	`3.4.4-1ubuntu0.24.04.1`	Not reported	Not reported	Not reported
Cpe	python-ldap	cpe	Not reported	`3.4.5`	Not reported	NVD-CVE-2025-61911	Not reported
Ubuntu	python-ldap	deb	pro	`3.2.0-4ubuntu2.1+esm1`	Not reported	USN-7828-1	Not reported
Ubuntu	python-ldap	deb	22.04	`3.2.0-4ubuntu7.2`	Not reported	USN-7828-1	Not reported
Ubuntu	python-ldap	deb	24.04	`3.4.4-1ubuntu0.24.04.1`	Not reported	USN-7828-1	Not reported
Ubuntu	python-ldap	deb	25.10	`3.4.4-1ubuntu0.25.10.1`	Not reported	USN-7828-1	Not reported
Suse	python-ldap	rpm	linux enterprise server 16.0	`3.4.4-160000.3.1`	Not reported	SUSE-SU-2026:20933-1	Not reported
Suse	python-ldap	rpm	linux enterprise server for sap applications 16.0	`3.4.4-160000.3.1`	Not reported	SUSE-SU-2026:20933-1	Not reported
Opensuse	python-ldap	rpm	leap 16.0	`3.4.4-160000.3.1`	Not reported	OPENSUSE-SU-2026:20421-1	Not reported
Opensuse	python-ldap	rpm	tumbleweed	`3.4.5-1.1`	Not reported	OPENSUSE-SU-2025:15637-1	Not reported
Ubuntu	python-ldap	deb	pro	`3.2.0-4ubuntu2.1+esm1`	Not reported	UBUNTU-CVE-2025-61911	Not reported
Ubuntu	python-ldap	deb	22.04	`3.2.0-4ubuntu7.2`	Not reported	UBUNTU-CVE-2025-61911	Not reported
Ubuntu	python-ldap	deb	24.04	`3.4.4-1ubuntu0.24.04.1`	Not reported	UBUNTU-CVE-2025-61911	Not reported
Ubuntu	python-ldap	deb	25.10	`3.4.4-1ubuntu0.25.10.1`	Not reported	UBUNTU-CVE-2025-61911	Not reported
Suse	python-ldap	rpm	linux enterprise module for package hub 15 sp6	`3.4.0-150400.3.3.1`	Not reported	SUSE-SU-2025:3714-1	Not reported
Opensuse	python-ldap	rpm	leap 15.6	`3.4.0-150400.3.3.1`	Not reported	SUSE-SU-2025:3714-1	Not reported
Suse	python-ldap	rpm	linux enterprise module for package hub 15 sp6	`3.1.0-150100.3.5.1`	Not reported	SUSE-SU-2025:3695-1	Not reported

[Debian bug #1117858]

OpenFactory catalog packages

[openSUSE Tumbleweed]

[python313-ldap]Unknown
Source package: [python-ldap]
Details (1)
- 3.4.7-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 3.4.5-1.1
  Version impact unknown
  usn · python-ldap · opensuse · tumbleweed
[python314-ldap]Unknown
Source package: [python-ldap]
Details (1)
- 3.4.7-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 3.4.5-1.1
  Version impact unknown
  usn · python-ldap · opensuse · tumbleweed

[Debian 12 (Bookworm)]

[python3-ldap]Fixed
Source package: [python-ldap]
Details (2)
- 3.4.3-2+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.4.3-2+deb12u1
  usn · python-ldap · debian · bookworm; usn · python-ldap · debian · 12
- 3.4.3-2+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.4.3-2+deb12u1
  usn · python-ldap · debian · bookworm; usn · python-ldap · debian · 12
[python3-pyldap]Fixed
Source package: [python-ldap]
Details (2)
- 3.4.3-2+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.4.3-2+deb12u1
  usn · python-ldap · debian · bookworm; usn · python-ldap · debian · 12
- 3.4.3-2+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.4.3-2+deb12u1
  usn · python-ldap · debian · bookworm; usn · python-ldap · debian · 12
[python-ldap-doc]Fixed
Source package: [python-ldap]
Details (2)
- 3.4.3-2+deb12u1 · all · bookworm
  Fixed · Fixed: 3.4.3-2+deb12u1
  usn · python-ldap · debian · bookworm; usn · python-ldap · debian · 12
- 3.4.3-2+deb12u1 · all · bookworm
  Fixed · Fixed: 3.4.3-2+deb12u1
  usn · python-ldap · debian · bookworm; usn · python-ldap · debian · 12

[Debian 13 (Trixie)]

[python3-ldap]Fixed
Source package: [python-ldap]
Details (2)
- 3.4.4-1+deb13u1 · amd64 · trixie
  Fixed · Fixed: 3.4.4-1+deb13u1
  usn · python-ldap · debian · 13
- 3.4.4-1+deb13u1 · arm64 · trixie
  Fixed · Fixed: 3.4.4-1+deb13u1
  usn · python-ldap · debian · 13
[python3-pyldap]Fixed
Source package: [python-ldap]
Details (2)
- 3.4.4-1+deb13u1 · amd64 · trixie
  Fixed · Fixed: 3.4.4-1+deb13u1
  usn · python-ldap · debian · 13
- 3.4.4-1+deb13u1 · arm64 · trixie
  Fixed · Fixed: 3.4.4-1+deb13u1
  usn · python-ldap · debian · 13
[python-ldap-doc]Fixed
Source package: [python-ldap]
Details (2)
- 3.4.4-1+deb13u1 · all · trixie
  Fixed · Fixed: 3.4.4-1+deb13u1
  usn · python-ldap · debian · 13
- 3.4.4-1+deb13u1 · all · trixie
  Fixed · Fixed: 3.4.4-1+deb13u1
  usn · python-ldap · debian · 13

Observed: Oct 24, 2026, 5:22:24 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]