Lucene search

K
oraclelinuxOracleLinuxELSA-2019-3981
HistoryNov 27, 2019 - 12:00 a.m.

389-ds-base security and bug fix update

2019-11-2700:00:00
linux.oracle.com
41

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

[1.3.9.1-12]

  • Bump version to 1.3.9.1-12
  • Resolves: Bug 1767622 - CleanAllRUV task limit not enforced
    [1.3.9.1-11]
  • Bump version to 1.3.9.1-11
  • Resolves: Bug 1748198 - EMBARGOED CVE-2019-14824 389-ds-base: Read permission check bypass via the deref plugin
  • Resolves: Bug 1754831 - After audit log file is rotated, DS version string is logged after each update
  • Resolves: Bug 1763622 - Extremely slow LDIF import with ldif2db
  • Resolves: Bug 1763627 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex
  • Resolves: Bug 1749289 - DB Deadlock on modrdn appears to corrupt database and entry cache

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N