CVE-2021-3514

2021-05-2800:00:00

CWE-476

redhat

www.cve.org

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "389-ds-base",
    "versions": [
      {
        "version": "389-ds-base 1.4.3",
        "status": "affected"
      }
    ]
  }
]