A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested and a NULL pointer is dereferenced. If a privileged user performs a ldap MODDN operation after a failed operation, it could lead to a Denial of Service (DoS) or system crash.
CVSS Details
- CVSS 3.1 Base Score: 4.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade 389-ds-base-snmpUpgrade 389-ds-base-libsUpgrade 389-ds-base-develUpgrade python3-lib389Upgrade 389-ds-base | May 9, 2025 | Mar 18, 2025 |
| Amazon Linux Ami 2 | — | Upgrade 389-ds-base-develUpgrade 389-ds-baseUpgrade 389-ds-base-libsUpgrade 389-ds-base-snmpUpgrade 389-ds-base-debuginfo | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade 389-ds-base | May 15, 2025 | Mar 18, 2025 |
| Oracle_linux | — | Upgrade 389-ds-base-snmpUpgrade python3-lib389Upgrade 389-ds-base-libsUpgrade 389-ds-base-develUpgrade 389-ds-base | May 7, 2025 | Mar 18, 2025 |
| Redhat_linux | — | Upgrade 389-ds-base-snmp-debuginfoUpgrade 389-ds-base-libs-debuginfoUpgrade 389-ds-base-debuginfoUpgrade 389-ds-base-debugsourceUpgrade 389-ds-baseNo solution existsUpgrade python3-lib389Upgrade 389-ds-base-snmpUpgrade 389-ds-base-libsUpgrade 389-ds-base-devel | Apr 9, 2025 | Mar 18, 2025 |
| Rocky_linux | — | Upgrade 389-ds-base-libsUpgrade 389-ds-base-develUpgrade 389-ds-base-debuginfoUpgrade 389-ds-base-libs-debuginfoUpgrade 389-ds-base-snmp-debuginfoUpgrade 389-ds-baseUpgrade 389-ds-base-snmpUpgrade 389-ds-base-debugsource | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade 389-ds-develUpgrade lib389Upgrade 389-dsUpgrade 389-ds-snmpUpgrade libsvrcore0 | Jul 16, 2025 | Mar 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub