When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade 389-ds-base-snmpUpgrade 389-ds-baseUpgrade 389-ds-base-develUpgrade 389-ds-base-debuginfoUpgrade 389-ds-base-libs | Jun 24, 2021 | Mar 26, 2021 |
| Centos_linux | — | Upgrade 389-ds-base-snmp-debuginfoUpgrade 389-ds-base-debugsourceUpgrade 389-ds-base-debuginfoUpgrade 389-ds-base-libs-debuginfoUpgrade 389-ds-base-snmpUpgrade python3-lib389Upgrade 389-ds-baseUpgrade 389-ds-base-libsUpgrade 389-ds-base-legacy-tools-debuginfoUpgrade 389-ds-base-develUpgrade 389-ds-base-legacy-tools | Apr 8, 2021 | Mar 26, 2021 |
| Debian | — | Upgrade 389-ds-base | Jul 30, 2024 | Mar 26, 2021 |
| Oracle_linux | — | Upgrade 389-ds-base-legacy-toolsUpgrade python3-lib389Upgrade 389-ds-base-snmpUpgrade 389-ds-base-libsUpgrade 389-ds-baseUpgrade 389-ds-base-devel | Apr 9, 2021 | Dec 7, 2020 |
| Redhat_linux | — | No solution existsUpgrade 389-ds-base-legacy-tools-debuginfoUpgrade 389-ds-base-libs-debuginfoUpgrade python3-lib389Upgrade 389-ds-base-snmp-debuginfoUpgrade 389-ds-base-libsUpgrade 389-ds-base-snmpUpgrade 389-ds-base-debugsourceUpgrade 389-ds-base-legacy-toolsUpgrade 389-ds-base-develUpgrade 389-ds-base-debuginfoUpgrade 389-ds-base | Apr 8, 2021 | Mar 26, 2021 |
| Suse | — | Upgrade 389-ds-snmpUpgrade 389-ds-develUpgrade lib389Upgrade 389-dsUpgrade libsvrcore0 | Mar 17, 2021 | Mar 8, 2021 |
| Ubuntu | — | Upgrade 389-ds-base (Ubuntu Pro) | Mar 22, 2023 | Mar 26, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub