ALINUX2-SA-2022%3A0012

ALINUX2-SA-2022%3A0012 PUBLISHED CVSS 5.900000095367432 MEDIUM

Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities: CVE-2021-4091: A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.

Risk Scores

CVSS 3.1

5.900000095367432

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
Alibaba Cloud	389-ds-base

Timeline

Feb 23, 2022 CVE Published
Feb 23, 2022 CVE Updated

References

ALINUX2-SA-2022:0012: 389-ds-base security and bug fix update (Low) advisory
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4091 advisory

Open in Interactive Console →