Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-35518

Fixed in a distro release EPSS 2%

When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.

Published 2021-03-26 · CVE record · OSV

Products: redhat 389_directory_server, redhat directory_server, redhat enterprise_linux

Distro releases

ReleasePackageFixed in
Amazon Linux 2389-ds-base1.3.10.2-12.amzn2.0.1
Amazon Linux 2389-ds-base-devel1.3.10.2-12.amzn2.0.1
Amazon Linux 2389-ds-base-libs1.3.10.2-12.amzn2.0.1
Amazon Linux 2389-ds-base-snmp1.3.10.2-12.amzn2.0.1
Arch Linux389-ds-base2.0.2-1
Debian 12389-ds-base1.4.4.10-1
Debian 13389-ds-base1.4.4.10-1
Red Hat directory server 11.1389-ds-base0:1.4.2.12-5.module+el8dsrv+9896+eb95346c
Red Hat directory server 11.1389-ds-base-debuginfo0:1.4.2.12-5.module+el8dsrv+9896+eb95346c
Red Hat directory server 11.1389-ds-base-debugsource0:1.4.2.12-5.module+el8dsrv+9896+eb95346c
Red Hat directory server 11.1389-ds-base-devel0:1.4.2.12-5.module+el8dsrv+9896+eb95346c
Red Hat directory server 11.1389-ds-base-legacy-tools0:1.4.2.12-5.module+el8dsrv+9896+eb95346c
Red Hat directory server 11.1389-ds-base-legacy-tools-debuginfo0:1.4.2.12-5.module+el8dsrv+9896+eb95346c
Red Hat directory server 11.1389-ds-base-libs0:1.4.2.12-5.module+el8dsrv+9896+eb95346c
Red Hat directory server 11.1389-ds-base-libs-debuginfo0:1.4.2.12-5.module+el8dsrv+9896+eb95346c
Red Hat directory server 11.1389-ds-base-snmp0:1.4.2.12-5.module+el8dsrv+9896+eb95346c
Red Hat directory server 11.1389-ds-base-snmp-debuginfo0:1.4.2.12-5.module+el8dsrv+9896+eb95346c
Red Hat directory server 11.1cockpit-389-ds0:1.4.2.12-5.module+el8dsrv+9896+eb95346c
Red Hat directory server 11.1python3-lib3890:1.4.2.12-5.module+el8dsrv+9896+eb95346c
Red Hat directory server 11.2389-ds-base0:1.4.3.21-3.module+el8dsrv+10401+3d549418
Red Hat directory server 11.2389-ds-base-debuginfo0:1.4.3.21-3.module+el8dsrv+10401+3d549418
Red Hat directory server 11.2389-ds-base-debugsource0:1.4.3.21-3.module+el8dsrv+10401+3d549418
Red Hat directory server 11.2389-ds-base-devel0:1.4.3.21-3.module+el8dsrv+10401+3d549418
Red Hat directory server 11.2389-ds-base-legacy-tools0:1.4.3.21-3.module+el8dsrv+10401+3d549418
Red Hat directory server 11.2389-ds-base-legacy-tools-debuginfo0:1.4.3.21-3.module+el8dsrv+10401+3d549418
Red Hat directory server 11.2389-ds-base-libs0:1.4.3.21-3.module+el8dsrv+10401+3d549418
Red Hat directory server 11.2389-ds-base-libs-debuginfo0:1.4.3.21-3.module+el8dsrv+10401+3d549418
Red Hat directory server 11.2389-ds-base-snmp0:1.4.3.21-3.module+el8dsrv+10401+3d549418
Red Hat directory server 11.2389-ds-base-snmp-debuginfo0:1.4.3.21-3.module+el8dsrv+10401+3d549418
Red Hat directory server 11.2cockpit-389-ds0:1.4.3.21-3.module+el8dsrv+10401+3d549418
Red Hat directory server 11.2python3-lib3890:1.4.3.21-3.module+el8dsrv+10401+3d549418
Red Hat Enterprise Linux 7389-ds-base0:1.3.10.2-12.el7_9
Red Hat Enterprise Linux 7389-ds-base-debuginfo0:1.3.10.2-12.el7_9
Red Hat Enterprise Linux 7389-ds-base-devel0:1.3.10.2-12.el7_9
Red Hat Enterprise Linux 7389-ds-base-libs0:1.3.10.2-12.el7_9
Red Hat Enterprise Linux 7389-ds-base-snmp0:1.3.10.2-12.el7_9
Red Hat Enterprise Linux 8389-ds-base0:1.4.3.8-7.module+el8.3.0+10310+6e88d919
Red Hat Enterprise Linux 8389-ds-base-debuginfo0:1.4.3.8-7.module+el8.3.0+10310+6e88d919
Red Hat Enterprise Linux 8389-ds-base-debugsource0:1.4.3.8-7.module+el8.3.0+10310+6e88d919
Red Hat Enterprise Linux 8389-ds-base-devel0:1.4.3.8-7.module+el8.3.0+10310+6e88d919
Red Hat Enterprise Linux 8389-ds-base-legacy-tools0:1.4.3.8-7.module+el8.3.0+10310+6e88d919
Red Hat Enterprise Linux 8389-ds-base-legacy-tools-debuginfo0:1.4.3.8-7.module+el8.3.0+10310+6e88d919
Red Hat Enterprise Linux 8389-ds-base-libs0:1.4.3.8-7.module+el8.3.0+10310+6e88d919
Red Hat Enterprise Linux 8389-ds-base-libs-debuginfo0:1.4.3.8-7.module+el8.3.0+10310+6e88d919
Red Hat Enterprise Linux 8389-ds-base-snmp0:1.4.3.8-7.module+el8.3.0+10310+6e88d919
Red Hat Enterprise Linux 8389-ds-base-snmp-debuginfo0:1.4.3.8-7.module+el8.3.0+10310+6e88d919
Red Hat Enterprise Linux 8python3-lib3890:1.4.3.8-7.module+el8.3.0+10310+6e88d919
Red Hat rhel eus 8.2389-ds-base0:1.4.2.4-13.module+el8.2.0+10648+abe88955
Red Hat rhel eus 8.2389-ds-base-debuginfo0:1.4.2.4-13.module+el8.2.0+10648+abe88955
Red Hat rhel eus 8.2389-ds-base-debugsource0:1.4.2.4-13.module+el8.2.0+10648+abe88955
Red Hat rhel eus 8.2389-ds-base-devel0:1.4.2.4-13.module+el8.2.0+10648+abe88955
Red Hat rhel eus 8.2389-ds-base-legacy-tools0:1.4.2.4-13.module+el8.2.0+10648+abe88955
Red Hat rhel eus 8.2389-ds-base-legacy-tools-debuginfo0:1.4.2.4-13.module+el8.2.0+10648+abe88955
Red Hat rhel eus 8.2389-ds-base-libs0:1.4.2.4-13.module+el8.2.0+10648+abe88955
Red Hat rhel eus 8.2389-ds-base-libs-debuginfo0:1.4.2.4-13.module+el8.2.0+10648+abe88955
Red Hat rhel eus 8.2389-ds-base-snmp0:1.4.2.4-13.module+el8.2.0+10648+abe88955
Red Hat rhel eus 8.2389-ds-base-snmp-debuginfo0:1.4.2.4-13.module+el8.2.0+10648+abe88955
Red Hat rhel eus 8.2python3-lib3890:1.4.2.4-13.module+el8.2.0+10648+abe88955
SUSE Linux Enterprise Module for Server Applications 15 SP2389-ds1.4.3.19~git0.bef0b5bed-3.12.1
Ubuntu Pro 16.04 LTS389-ds-base1.3.4.9-1ubuntu0.1~esm1
Ubuntu Pro 18.04 LTS389-ds-base1.3.7.10-1ubuntu1+esm1
Ubuntu Pro 20.04 LTS389-ds-base1.4.3.6-2ubuntu0.1~esm1
openSUSE Leap 15.2389-ds1.4.3.19~git0.bef0b5bed-lp152.2.12.1