Splunk security advisory 15 January 2025: Regular Expression Denial of Service (ReDoS) in Splunk Supporting Add-on for Active Directory (SA-ldapsearch)

[screaminggoat@infosec.exchange]

Splunk security advisory 15 January 2025: Regular Expression Denial of Service (ReDoS) in Splunk Supporting Add-on for Active Directory (SA-ldapsearch)
CVE-2025-0367 (6.5 medium) In versions 3.1.0 and lower of the Splunk Supporting Add-on for Active Directory, also known as “SA-ldapsearch”, a vulnerable regular expression pattern could lead to a Regular Expression Denial of Service (ReDoS) attack.

No mention of exploitation

#splunk #vulnerability #CVE_2025_0367 #cve #infosec #cybersecurity

[catsalad@infosec.exchange]

@screaminggoat TIL that RegEx DoS has its own initialism.