CVE-2021-3514 PUBLISHED

When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash.

EPSS 0.34% · 56.7th percentile

Risk Scores

EPSS Score
0.34%
56.7th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:18.04:LTS389-ds-base0, 1.3.7.10-1ubuntu1, 1.3.7.10-1
Ubuntu:Pro:20.04:LTS389-ds-base1.4.3.6-2, 0, 1.4.1.6-4
Ubuntu:Pro:16.04:LTS389-ds-base1.3.3.12-1build1, 0, 1.3.4.9-1

Timeline

References

Open in Interactive Console →