CVE-2025-27497 - CVE House
Back to Database
Status published High CVE-2025-27497

OpenDJ Denial of Service (Dos) using alias loop

Vulnerability Description

OpenDJ is an LDAPv3 compliant directory service. OpenDJ prior to 4.9.3 contains a denial-of-service (DoS) vulnerability that causes the server to become unresponsive to all LDAP requests without crashing or restarting. This issue occurs when an alias loop exists in the LDAP database. If an ldapsearch request is executed with alias dereferencing set to "always" on this alias entry, the server stops responding to all future requests. Fortunately, the server can be restarted without data corruption. This vulnerability is fixed in 4.9.3.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-27497

Credits & Attribution

No credits recorded in the NVD database.

References

More from OpenIdentityPlatform

View All →
CVE-2025-64099
OpenAM allows use of arbitrary OIDC requested claims values in id_token and user_info
High 8.1
CVE-2024-41667
OpenAM FreeMarker template injection
High 8.8
CVE-2023-37471
User impersonation using SAMLv1.x SSO in Open Access Management
Critical 9.1

Affected Vendor

OpenIdentityPlatform

View all reports →

Affected Software

OpenDJ
Vulnerable Versions:
< 4.9.3

Timeline

Official Publish: March 5th, 2025
Last Modified: March 5th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-835

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service
Impact
T1190 Exploit Public-Facing Application
Initial Access
T1059 Command and Scripting Interpreter
Execution
T1562 Impair Defenses
Defense Evasion
T1485 Data Destruction
Impact