389-ds-base - security update

Fixed packages 1

Vulnerabilities 9

• Medium 6.5
  CVE-2019-14824

  A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute v…

  [UNKNOWN] 389-ds-base 389-ds-base 389-ds-base Debian Ubuntu
  Nov 8, 2019
• Medium 6.5
  CVE-2022-2850

  A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a …

  389-ds-base 389-ds-base Debian Ubuntu
  Oct 14, 2022
• Medium 5.3
  CVE-2019-3883

  In 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will be waited by the worke…

  Red Hat 389-ds-base 389-ds-base 389-ds-base Debian Ubuntu
  Apr 17, 2019
• Medium 4.3
  CVE-2019-10224

  A flaw has been found in 389-ds-base versions 1.4.x.x before 1.4.1.3. When executed in verbose mode, the dscreate and d…

  Red Hat 389-ds-base 389-ds-base 389-ds-base Debian Ubuntu
  Nov 25, 2019
• Unscored —
  CVE-2021-3514

  When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a sp…

  389-ds-base 389-ds-base Debian Ubuntu
  May 28, 2021
• Unscored —
  CVE-2021-3652

  A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, the…

  389-ds-base Debian
  Apr 18, 2022
• Unscored —
  CVE-2021-4091

  A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker c…

  389-ds-base 389-ds-base Debian Ubuntu
  Feb 18, 2022
• Unscored —
  CVE-2022-0918 Public exploit

  A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access …

  389-ds-base 389-ds-base Debian Ubuntu
  Mar 16, 2022
• Unscored —
  CVE-2022-0996

  A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause imp…

  389-ds-base 389-ds-base Debian Ubuntu
  Mar 23, 2022