Red Hat Security Advisory

RHSA-2021:2796

389-ds:1.4 security update

Released 2021-07-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 8.2) 389-ds-base-1.4.2.4-14.module+el8.2.0+11017+0eb5711a.aarch64::389-ds:1.4, 389-ds-base-1.4.2.4-14.module+el8.2.0+11017+0eb5711a.ppc64le::389-ds:1.4, 389-ds-base-1.4.2.4-14.module+el8.2.0+11017+0eb5711a.s390x::389-ds:1.4 +19

Fixes 1 record

TI-2021-02473 CVE-2021-3514 · GHSA-4mjm-c95j-8748

NULL pointer dereference in 389-ds-base

LOW 31

When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.012 Published 2021-05-28 Partial fix CWE-476