Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2022-0628

Опубликовано: 23 фев. 2022
Источник: oracle-oval
Платформа: Oracle Linux 7

Описание

ELSA-2022-0628: 389-ds-base security and bug fix update (LOW)

[1.3.10.2-15]

  • Bump version to 1.3.10.2-15
  • Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
  • Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search

Обновленные пакеты

Oracle Linux 7

Oracle Linux aarch64

389-ds-base

1.3.10.2-15.el7_9

389-ds-base-devel

1.3.10.2-15.el7_9

389-ds-base-libs

1.3.10.2-15.el7_9

389-ds-base-snmp

1.3.10.2-15.el7_9

Oracle Linux x86_64

389-ds-base

1.3.10.2-15.el7_9

389-ds-base-devel

1.3.10.2-15.el7_9

389-ds-base-libs

1.3.10.2-15.el7_9

389-ds-base-snmp

1.3.10.2-15.el7_9

Связанные CVE

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 4 года назад

A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.

CVSS3: 7.5
redhat
около 4 лет назад

A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.

CVSS3: 7.5
nvd
почти 4 года назад

A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.

CVSS3: 7.5
debian
почти 4 года назад

A double-free was found in the way 389-ds-base handles virtual attribu ...

rocky
почти 4 года назад

Low: 389-ds:1.4 security and bug fix update