CVE-2025-0367 — Regular Expression Denial of Service (ReDoS) in Splunk Supporting Add-on for Active Directory (SA-ldapsearch)

CVE-2025-0367

Regular Expression Denial of Service (ReDoS) in Splunk Supporting Add-on for Active Directory (SA-ldapsearch) PUBLISHED

Description (CNA)

In versions 3.1.0 and lower of the Splunk Supporting Add-on for Active Directory, also known as SA-ldapsearch, a vulnerable regular expression pattern could lead to a Regular Expression Denial of Service (ReDoS) attack.

Affected (CNA)

Vendor / product	Versions
Splunk / Splunk Supporting Add-on for Active Directory	affected 3.1 before 3.1.1

CWE

CWE-1333

References

https://advisory.splunk.com/advisories/SVD-2025-0103

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.