CVE-2021-3514
Fixed in a distro release EPSS 1%
When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash.
Products: redhat 389_directory_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | 389-ds-base | 2.0.7-1 |
| Debian 10 | 389-ds-base | 1.4.0.21-1+deb10u1 |
| Debian 12 | 389-ds-base | 1.4.4.11-2 |
| Debian 13 | 389-ds-base | 1.4.4.11-2 |
| Red Hat directory server 11.3 | 389-ds-base | 0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c |
| Red Hat directory server 11.3 | 389-ds-base-debuginfo | 0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c |
| Red Hat directory server 11.3 | 389-ds-base-debugsource | 0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c |
| Red Hat directory server 11.3 | 389-ds-base-devel | 0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c |
| Red Hat directory server 11.3 | 389-ds-base-legacy-tools | 0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c |
| Red Hat directory server 11.3 | 389-ds-base-legacy-tools-debuginfo | 0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c |
| Red Hat directory server 11.3 | 389-ds-base-libs | 0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c |
| Red Hat directory server 11.3 | 389-ds-base-libs-debuginfo | 0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c |
| Red Hat directory server 11.3 | 389-ds-base-snmp | 0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c |
| Red Hat directory server 11.3 | 389-ds-base-snmp-debuginfo | 0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c |
| Red Hat directory server 11.3 | cockpit-389-ds | 0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c |
| Red Hat directory server 11.3 | python3-lib389 | 0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c |
| Red Hat directory server 11.4 | 389-ds-base | 0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b |
| Red Hat directory server 11.4 | 389-ds-base-debuginfo | 0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b |
| Red Hat directory server 11.4 | 389-ds-base-debugsource | 0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b |
| Red Hat directory server 11.4 | 389-ds-base-devel | 0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b |
| Red Hat directory server 11.4 | 389-ds-base-legacy-tools | 0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b |
| Red Hat directory server 11.4 | 389-ds-base-legacy-tools-debuginfo | 0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b |
| Red Hat directory server 11.4 | 389-ds-base-libs | 0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b |
| Red Hat directory server 11.4 | 389-ds-base-libs-debuginfo | 0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b |
| Red Hat directory server 11.4 | 389-ds-base-snmp | 0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b |
| Red Hat directory server 11.4 | 389-ds-base-snmp-debuginfo | 0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b |
| Red Hat directory server 11.4 | cockpit-389-ds | 0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b |
| Red Hat directory server 11.4 | python3-lib389 | 0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b |
| Red Hat Enterprise Linux 8 | 389-ds-base | 0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48 |
| Red Hat Enterprise Linux 8 | 389-ds-base-debuginfo | 0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48 |
| Red Hat Enterprise Linux 8 | 389-ds-base-debugsource | 0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48 |
| Red Hat Enterprise Linux 8 | 389-ds-base-devel | 0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48 |
| Red Hat Enterprise Linux 8 | 389-ds-base-legacy-tools | 0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48 |
| Red Hat Enterprise Linux 8 | 389-ds-base-legacy-tools-debuginfo | 0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48 |
| Red Hat Enterprise Linux 8 | 389-ds-base-libs | 0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48 |
| Red Hat Enterprise Linux 8 | 389-ds-base-libs-debuginfo | 0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48 |
| Red Hat Enterprise Linux 8 | 389-ds-base-snmp | 0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48 |
| Red Hat Enterprise Linux 8 | 389-ds-base-snmp-debuginfo | 0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48 |
| Red Hat Enterprise Linux 8 | python3-lib389 | 0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48 |
| Red Hat rhel eus 8.2 | 389-ds-base | 0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a |
| Red Hat rhel eus 8.2 | 389-ds-base-debuginfo | 0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a |
| Red Hat rhel eus 8.2 | 389-ds-base-debugsource | 0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a |
| Red Hat rhel eus 8.2 | 389-ds-base-devel | 0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a |
| Red Hat rhel eus 8.2 | 389-ds-base-legacy-tools | 0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a |
| Red Hat rhel eus 8.2 | 389-ds-base-legacy-tools-debuginfo | 0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a |
| Red Hat rhel eus 8.2 | 389-ds-base-libs | 0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a |
| Red Hat rhel eus 8.2 | 389-ds-base-libs-debuginfo | 0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a |
| Red Hat rhel eus 8.2 | 389-ds-base-snmp | 0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a |
| Red Hat rhel eus 8.2 | 389-ds-base-snmp-debuginfo | 0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a |
| Red Hat rhel eus 8.2 | python3-lib389 | 0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a |
| Rocky Linux 8 | 389-ds-base | 0:1.4.3.16-16.module+el8.4.0+596+159889e5 |
| SUSE Linux Enterprise Module for Server Applications 15 SP2 | 389-ds | 1.4.3.23~git0.f53d0132b-3.15.1 |
| Ubuntu Pro 16.04 LTS | 389-ds-base | 1.3.4.9-1ubuntu0.1~esm1 |
| Ubuntu Pro 18.04 LTS | 389-ds-base | 1.3.7.10-1ubuntu1+esm1 |
| Ubuntu Pro 20.04 LTS | 389-ds-base | 1.4.3.6-2ubuntu0.1~esm1 |
| openSUSE Leap 15.2 | 389-ds | 1.4.3.23~git0.f53d0132b-lp152.2.15.1 |