Red Hat Security AdvisoryRHSA-2022:5239
389-ds-base security, bug fix, and enhancement update
Released 2022-06-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) 389-ds-base-1.3.10.2-16.el7_9, 389-ds-base-devel-1.3.10.2-16.el7_9, 389-ds-base-libs-1.3.10.2-16.el7_9 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) 389-ds-base-1.3.10.2-16.el7_9, 389-ds-base-devel-1.3.10.2-16.el7_9, 389-ds-base-libs-1.3.10.2-16.el7_9 +1
- Red Hat Enterprise Linux Server (v. 7) 389-ds-base-1.3.10.2-16.el7_9, 389-ds-base-libs-1.3.10.2-16.el7_9
- Red Hat Enterprise Linux Server Optional (v. 7) 389-ds-base-1.3.10.2-16.el7_9, 389-ds-base-devel-1.3.10.2-16.el7_9, 389-ds-base-libs-1.3.10.2-16.el7_9 +1
- Red Hat Enterprise Linux Workstation (v. 7) 389-ds-base-1.3.10.2-16.el7_9, 389-ds-base-libs-1.3.10.2-16.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) 389-ds-base-devel-1.3.10.2-16.el7_9, 389-ds-base-snmp-1.3.10.2-16.el7_9
Fixes 2 records
Priority MEDIUM 42
A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05914 · Published 2022-03-16 · Partial fix
Priority LOW 32
A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01531 · Published 2022-03-23 · Partial fix CWE-287
