Lucene search
GoogleOSV:RLSA-2022:0889HistoryMar 15, 2022 - 9:10 a.m.
Low: 389-ds:1.4 security and bug fix update
2022-03-1509:10:39
Google
osv.dev
9
389 directory server
ldapv3
security fix
bug fix
cve-2021-4091
bz#2059893
bz#2060106
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.
Security Fix(es):
- 389-ds-base: double free of the virtual attribute context in persistent search (CVE-2021-4091)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
-
Paged search lookthroughlimit counter doesnt take read ahead into account (BZ#2059893)
-
Based on 1944494 (RFC 4530 entryUUID attribute) - plugin entryuuid failing (BZ#2060106)
Related
nessus
nessus
RHEL 8 : 389-ds:1.4 (RHSA-2022:1410)
2022-04-19 00:00:00
Scientific Linux Security Update : 389-ds-base on SL7.x x86_64 (2022:0628)
2022-02-24 00:00:00
Rocky Linux 8 : 389-ds:1.4 (RLSA-2022:0889)
2023-11-06 00:00:00
osv
osv
Low: 389-ds:1.4 security and bug fix update
2022-03-15 09:10:39
389-ds-base - security update
2023-04-24 00:00:00
mageia
mageia
Updated 389-ds-base packages fix security vulnerability
2022-03-21 23:18:30
redhat
redhat
(RHSA-2022:0889) Low: 389-ds:1.4 security and bug fix update
2022-03-15 09:10:39
(RHSA-2022:1410) Low: 389-ds:1.4 security and bug fix update
2022-04-19 13:44:08
(RHSA-2022:0628) Low: 389-ds-base security and bug fix update
2022-02-22 14:30:21
prion
prion
Double free
2022-02-18 18:15:00
oraclelinux
oraclelinux
389-ds:1.4 security and bug fix update
2022-03-16 00:00:00
389-ds-base security and bug fix update
2022-02-23 00:00:00
debiancve
debiancve
CVE-2021-4091
2022-02-18 18:15:10
f5
f5
K15244523 : 389-ds-base vulnerability CVE-2021-4091
2022-04-21 00:00:00
cvelist
cvelist
CVE-2021-4091
2022-02-18 00:00:00
openvas
openvas
CentOS: Security Advisory for 389-ds-base (CESA-2022:0628)
2022-02-26 00:00:00
Mageia: Security Advisory (MGASA-2022-0106)
2022-03-22 00:00:00
openSUSE: Security Advisory for 389-ds (SUSE-SU-2022:2295-1)
2022-07-07 00:00:00
almalinux
almalinux
Low: 389-ds:1.4 security and bug fix update
2022-03-15 09:10:39
veracode
veracode
Denial Of Service (DoS)
2022-03-13 00:42:56
cve
cve
CVE-2021-4091
2022-02-18 18:15:10
nvd
nvd
CVE-2021-4091
2022-02-18 18:15:10
amazon
amazon
Low: 389-ds-base
2022-08-15 18:37:00
Medium: 389-ds-base
2022-07-19 00:26:00
centos
centos
389 security update
2022-02-25 15:36:34
ubuntucve
ubuntucve
CVE-2021-4091
2022-02-18 00:00:00
redhatcve
redhatcve
CVE-2021-4091
2022-01-27 13:33:10
rocky
rocky
389-ds:1.4 security and bug fix update
2022-03-15 09:10:39
suse
suse
Security update for 389-ds (important)
2022-07-06 00:00:00
Security update for 389-ds (important)
2022-06-14 00:00:00
debian
debian
[SECURITY] [DLA 3399-1] 389-ds-base security update
2023-04-24 05:25:20