Red Hat Security Advisory

RHSA-2021:2323

389-ds-base security and bug fix update

Released 2021-06-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client Optional (v. 7) 389-ds-base-1.3.10.2-12.el7_9, 389-ds-base-devel-1.3.10.2-12.el7_9, 389-ds-base-libs-1.3.10.2-12.el7_9 +1
Red Hat Enterprise Linux ComputeNode Optional (v. 7) 389-ds-base-1.3.10.2-12.el7_9, 389-ds-base-devel-1.3.10.2-12.el7_9, 389-ds-base-libs-1.3.10.2-12.el7_9 +1
Red Hat Enterprise Linux Server (v. 7) 389-ds-base-1.3.10.2-12.el7_9, 389-ds-base-libs-1.3.10.2-12.el7_9
Red Hat Enterprise Linux Server Optional (v. 7) 389-ds-base-1.3.10.2-12.el7_9, 389-ds-base-devel-1.3.10.2-12.el7_9, 389-ds-base-libs-1.3.10.2-12.el7_9 +1
Red Hat Enterprise Linux Workstation (v. 7) 389-ds-base-1.3.10.2-12.el7_9, 389-ds-base-libs-1.3.10.2-12.el7_9
Red Hat Enterprise Linux Workstation Optional (v. 7) 389-ds-base-devel-1.3.10.2-12.el7_9, 389-ds-base-snmp-1.3.10.2-12.el7_9

TI-2020-18037 CVE-2020-35518 · GHSA-vg4h-9m5m-rchq

LOW 27

When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01538 Published 2021-03-26 Partial fix CWE-200