TI-2021-02594 CVE-2021-3652 · GHSA-qc73-mcqm-3m29
Improper authentication in 389-ds-base
Priority LOW 32
A flaw was found in 389-ds-base.
RHSA-2021:3955
redhat-ds:11 security, bug fix, and enhancement update
Released 2021-10-25 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Directory Server 11.4 for RHEL 8 389-ds-base-1.4.3.27-2.module+el8dsrv+12690+c6df6d1b.src::redhat-ds:11, 389-ds-base-1.4.3.27-2.module+el8dsrv+12690+c6df6d1b.x86_64::redhat-ds:11, 389-ds-base-devel-1.4.3.27-2.module+el8dsrv+12690+c6df6d1b.x86_64::redhat-ds:11 +5
Fixes 2 records
TI-2021-02473 CVE-2021-3514 · GHSA-4mjm-c95j-8748
NULL pointer dereference in 389-ds-base
Priority LOW 31
When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash.