vulnerability

CentOS Linux: CVE-2021-3514: Moderate: 389-ds:1.4 security and bug fix update (CESA-2021:2595)

Try Surface Command
Back to search
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:N/I:N/A:P)
Published
May 28, 2021
Added
Jun 30, 2021
Modified
May 25, 2023

Description

When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash.

Solutions

centos-upgrade-389-ds-basecentos-upgrade-389-ds-base-debuginfocentos-upgrade-389-ds-base-debugsourcecentos-upgrade-389-ds-base-develcentos-upgrade-389-ds-base-legacy-toolscentos-upgrade-389-ds-base-legacy-tools-debuginfocentos-upgrade-389-ds-base-libscentos-upgrade-389-ds-base-libs-debuginfocentos-upgrade-389-ds-base-snmpcentos-upgrade-389-ds-base-snmp-debuginfocentos-upgrade-python3-lib389

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today