Lucene search
OracleLinuxELSA-2021-3807HistoryOct 13, 2021 - 12:00 a.m.
389-ds-base security and bug fix update
2021-10-1300:00:00
linux.oracle.com
26
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
[1.3.10.2-13]
- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 7 | src | 389-ds-base | < 1.3.10.2-13.el7_9 | 389-ds-base-1.3.10.2-13.el7_9.src.rpm |
| oracle linux | 7 | aarch64 | 389-ds-base | < 1.3.10.2-13.el7_9 | 389-ds-base-1.3.10.2-13.el7_9.aarch64.rpm |
| oracle linux | 7 | aarch64 | 389-ds-base-devel | < 1.3.10.2-13.el7_9 | 389-ds-base-devel-1.3.10.2-13.el7_9.aarch64.rpm |
| oracle linux | 7 | aarch64 | 389-ds-base-libs | < 1.3.10.2-13.el7_9 | 389-ds-base-libs-1.3.10.2-13.el7_9.aarch64.rpm |
| oracle linux | 7 | aarch64 | 389-ds-base-snmp | < 1.3.10.2-13.el7_9 | 389-ds-base-snmp-1.3.10.2-13.el7_9.aarch64.rpm |
| oracle linux | 7 | src | 389-ds-base | < 1.3.10.2-13.el7_9 | 389-ds-base-1.3.10.2-13.el7_9.src.rpm |
| oracle linux | 7 | x86_64 | 389-ds-base | < 1.3.10.2-13.el7_9 | 389-ds-base-1.3.10.2-13.el7_9.x86_64.rpm |
| oracle linux | 7 | x86_64 | 389-ds-base-devel | < 1.3.10.2-13.el7_9 | 389-ds-base-devel-1.3.10.2-13.el7_9.x86_64.rpm |
| oracle linux | 7 | x86_64 | 389-ds-base-libs | < 1.3.10.2-13.el7_9 | 389-ds-base-libs-1.3.10.2-13.el7_9.x86_64.rpm |
| oracle linux | 7 | x86_64 | 389-ds-base-snmp | < 1.3.10.2-13.el7_9 | 389-ds-base-snmp-1.3.10.2-13.el7_9.x86_64.rpm |
Related
nessus
nessus
CentOS 7 : 389-ds-base (CESA-2021:3807)
2021-11-17 00:00:00
openSUSE 15 Security Update : 389-ds (openSUSE-SU-2021:2801-1)
2021-08-21 00:00:00
openSUSE 15 Security Update : 389-ds (openSUSE-SU-2021:1211-1)
2021-09-01 00:00:00
almalinux
almalinux
Low: 389-ds:1.4 security and bug fix update
2021-08-10 12:01:08
oraclelinux
oraclelinux
389-ds:1.4 security and bug fix update
2021-08-12 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2231
2023-09-05 12:17:46
Advisory ROSA-SA-2023-2237
2023-09-19 09:31:12
redhat
redhat
(RHSA-2021:3807) Low: 389-ds-base security and bug fix update
2021-10-12 13:22:56
(RHSA-2021:3906) Low: 389-ds:1.4 security and bug fix update
2021-10-19 06:31:53
(RHSA-2021:3079) Low: 389-ds:1.4 security and bug fix update
2021-08-10 12:01:08
openvas
openvas
Mageia: Security Advisory (MGASA-2021-0440)
2022-01-28 00:00:00
Huawei EulerOS: Security Advisory for 389-ds-base (EulerOS-SA-2022-1156)
2022-02-24 00:00:00
openSUSE: Security Advisory for 389-ds (openSUSE-SU-2021:1211-1)
2021-08-31 00:00:00
rocky
rocky
389-ds:1.4 security and bug fix update
2021-08-10 12:01:08
suse
suse
Security update for 389-ds (moderate)
2021-08-30 00:00:00
Security update for 389-ds (moderate)
2021-08-20 00:00:00
centos
centos
389 security update
2021-11-17 14:40:17
amazon
amazon
Low: 389-ds-base
2021-12-08 02:21:00
Low: 389-admin
2022-07-28 20:30:00
Low: 389-ds-base
2022-07-28 20:31:00
mageia
mageia
Updated 389-ds-base packages fix security vulnerability
2021-09-23 07:49:29
veracode
veracode
Insecure Access Control
2021-10-18 14:15:47
cve
cve
CVE-2021-3652
2022-04-18 17:15:00
debiancve
debiancve
CVE-2021-3652
2022-04-18 17:15:00
redhatcve
redhatcve
CVE-2021-3652
2021-07-16 21:25:01
prion
prion
Authentication flaw
2022-04-18 17:15:00
osv
osv
CVE-2021-3652
2022-04-18 17:15:15
Low: 389-ds:1.4 security and bug fix update
2021-08-10 12:01:08
389-ds-base - security update
2023-04-24 00:00:00
archlinux
archlinux
[ASA-202107-72] 389-ds-base: multiple issues
2021-07-27 00:00:00
ubuntucve
ubuntucve
CVE-2021-3652
2022-04-18 00:00:00
debian
debian
[SECURITY] [DLA 3399-1] 389-ds-base security update
2023-04-24 05:25:20
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related for ELSA-2021-3807