TI-2021-02971 CVE-2021-4091 · GHSA-qwhp-2gp7-qhfq
Double free in 389-ds-base
Priority LOW 37
A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches.
RHSA-2022:0952
redhat-ds:11.3 security and bug fix update
Released 2022-03-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Directory Server 11.3 for RHEL 8 389-ds-base-1.4.3.22-4.module+el8dsrv+13893+84b6c18c.src::redhat-ds:11, 389-ds-base-1.4.3.22-4.module+el8dsrv+13893+84b6c18c.x86_64::redhat-ds:11, 389-ds-base-devel-1.4.3.22-4.module+el8dsrv+13893+84b6c18c.x86_64::redhat-ds:11 +5
Fixes 2 records
TI-2021-02473 CVE-2021-3514 · GHSA-4mjm-c95j-8748
NULL pointer dereference in 389-ds-base
Priority LOW 31
When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash.