Every CVE Search/ Get API key

CVE-2021-4091

A double-free was found in the way 389-ds-base handles virtual attributes context in persistent...

7.5 HighFix available

A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

2.01%Up 1.1 points since Feb 19, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.

Record
CVE-2021-4091
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-415
Updated
2026-11-02
CVE List No score

A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.

Record
CVE-2021-4091
Weakness
CWE-415
Updated
2026-11-02
EUVDEUVD-2021-33978 No score

A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.

Record
EUVD-2021-33978
Updated
2026-11-02
GitHub AdvisoriesGHSA-qwhp-2gp7-qhfq 7.5

A double-free was found in the way 389-ds-base handles virtual attributes context in persistent...

A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.

Record
GHSA-qwhp-2gp7-qhfq
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-415
Updated
2026-11-02
OSV 7.5

A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.

Record
CVE-2021-4091
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2021-4091 7.5

A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.

Record
DEBIAN-CVE-2021-4091
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 13 moreShow less
OSVRHSA-2022:0628 7.5

Red Hat Security Advisory: 389-ds-base security and bug fix update

Record
RHSA-2022:0628
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:0889 7.5

Red Hat Security Advisory: 389-ds:1.4 security and bug fix update

Record
RHSA-2022:0889
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:0952 7.5

Red Hat Security Advisory: redhat-ds:11.3 security and bug fix update

Record
RHSA-2022:0952
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:1410 7.5

Red Hat Security Advisory: 389-ds:1.4 security and bug fix update

Record
RHSA-2022:1410
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2022:0889 7.5

Low: 389-ds:1.4 security and bug fix update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

  • 389-ds-base: double free of the virtual attribute context in persistent search (CVE-2021-4091)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • Paged search lookthroughlimit counter doesnt take read ahead into account (BZ#2059893)

  • Based on 1944494 (RFC 4530 entryUUID attribute) - plugin entryuuid failing (BZ#2060106)

Record
RLSA-2022:0889
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2021-4091 7.5

A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.

Record
UBUNTU-CVE-2021-4091
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2022:0889 No score

Low: 389-ds:1.4 security and bug fix update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

  • 389-ds-base: double free of the virtual attribute context in persistent search (CVE-2021-4091)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • Paged search lookthroughlimit counter doesnt take read ahead into account (BZ#2059893)

  • Based on 1944494 (RFC 4530 entryUUID attribute) - plugin entryuuid failing (BZ#2060106)

Record
ALSA-2022:0889
Updated
2026-11-02
OSVMGASA-2022-0106 No score

Updated 389-ds-base packages fix security vulnerability

A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash. (CVE-2021-4091)

Record
MGASA-2022-0106
Updated
2026-11-02
OSVSUSE-SU-2022:2081-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • CVE-2021-4091: Fixed double free in psearch (bsc#1195324).
  • CVE-2022-1949: Fixed full access control bypass with simple crafted query (bsc#1199889).
Record
SUSE-SU-2022:2081-1
Updated
2026-11-02
OSVSUSE-SU-2022:2105-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • CVE-2021-4091: Fixed double free in psearch (bsc#1195324).
  • CVE-2022-1949: Fixed full access control bypass with simple crafted query (bsc#1199889).
Record
SUSE-SU-2022:2105-1
Updated
2026-11-02
OSVSUSE-SU-2022:2109-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • CVE-2021-3652: Fixed disabled accounts may be able to bind with crypt passwords (bsc#1188455).
  • CVE-2022-1949: Fixed full access control bypass with simple crafted query (bsc#1199889).
  • CVE-2021-4091: Fixed double free in psearch (bsc#1195324).
Record
SUSE-SU-2022:2109-1
Updated
2026-11-02
OSVSUSE-SU-2022:2163-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • CVE-2022-1949: Fixed full access control bypass with simple crafted query (bsc#1199889).
  • CVE-2022-0918: Fixed denial of service issue via crafted messages (bsc#1197275).
  • CVE-2022-0996: Fixed mishandling of password expiry (bsc#1197345).
  • CVE-2021-4091: Fixed double free in psearch (bsc#1195324).
  • CVE-2021-3652: Fixed disabled accounts may be able to bind with crypt passwords (bsc#1188455).
Record
SUSE-SU-2022:2163-1
Updated
2026-11-02
OSVSUSE-SU-2022:2295-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • CVE-2021-4091: Fixed double free in psearch (bsc#1195324).
  • CVE-2022-1949: Fixed full access control bypass with simple crafted query (bsc#1199889).
Record
SUSE-SU-2022:2295-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
389-ds-base
AlmaLinux:8
 before 1.4.3.23-14.module_el8.5.0+2628+c731dc97
1.4.3.23-14.module_el8.5.0+2628+c731dc97
389-ds-base-devel
AlmaLinux:8
 before 1.4.3.23-14.module_el8.5.0+2628+c731dc97
1.4.3.23-14.module_el8.5.0+2628+c731dc97
389-ds-base-legacy-tools
AlmaLinux:8
 before 1.4.3.23-14.module_el8.5.0+2628+c731dc97
1.4.3.23-14.module_el8.5.0+2628+c731dc97
389-ds-base-libs
AlmaLinux:8
 before 1.4.3.23-14.module_el8.5.0+2628+c731dc97
1.4.3.23-14.module_el8.5.0+2628+c731dc97
389-ds-base-snmp
AlmaLinux:8
 before 1.4.3.23-14.module_el8.5.0+2628+c731dc97
1.4.3.23-14.module_el8.5.0+2628+c731dc97
python3-lib389
AlmaLinux:8
 before 1.4.3.23-14.module_el8.5.0+2628+c731dc97
1.4.3.23-14.module_el8.5.0+2628+c731dc97
389-ds-base
Debian:12
 before 2.0.15-1
2.0.15-1
389-ds-base
Debian:13
 before 2.0.15-1
2.0.15-1
389-ds-base
Debian:10
From an advisory covering 9 CVEs
 before 1.4.0.21-1+deb10u1, plus listed versions
1.4.0.21-1
1.4.0.21-1+deb10u1
389-ds-base
Debian:11
From an advisory covering 9 CVEs
 before 1.4.4.11-2+deb11u1, plus listed versions
1.4.4.11-2
1.4.4.11-2+deb11u1
Show 87 moreShow less
Affected packages
PackageAffectedFixed
389-ds-base
Mageia:8
 before 1.4.0.26-8.2.mga8
1.4.0.26-8.2.mga8
389-ds-base
Red Hat:enterprise_linux:7::client
 before 0:1.3.10.2-15.el7_9
0:1.3.10.2-15.el7_9
389-ds-base-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:1.3.10.2-15.el7_9
0:1.3.10.2-15.el7_9
389-ds-base-devel
Red Hat:enterprise_linux:7::client
 before 0:1.3.10.2-15.el7_9
0:1.3.10.2-15.el7_9
389-ds-base-libs
Red Hat:enterprise_linux:7::client
 before 0:1.3.10.2-15.el7_9
0:1.3.10.2-15.el7_9
389-ds-base-snmp
Red Hat:enterprise_linux:7::client
 before 0:1.3.10.2-15.el7_9
0:1.3.10.2-15.el7_9
389-ds-base
Red Hat:enterprise_linux:7::computenode
 before 0:1.3.10.2-15.el7_9
0:1.3.10.2-15.el7_9
389-ds-base-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:1.3.10.2-15.el7_9
0:1.3.10.2-15.el7_9
389-ds-base-devel
Red Hat:enterprise_linux:7::computenode
 before 0:1.3.10.2-15.el7_9
0:1.3.10.2-15.el7_9
389-ds-base-libs
Red Hat:enterprise_linux:7::computenode
 before 0:1.3.10.2-15.el7_9
0:1.3.10.2-15.el7_9
389-ds-base-snmp
Red Hat:enterprise_linux:7::computenode
 before 0:1.3.10.2-15.el7_9
0:1.3.10.2-15.el7_9
389-ds-base
Red Hat:enterprise_linux:7::server
 before 0:1.3.10.2-15.el7_9
0:1.3.10.2-15.el7_9
389-ds-base-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:1.3.10.2-15.el7_9
0:1.3.10.2-15.el7_9
389-ds-base-libs
Red Hat:enterprise_linux:7::server
 before 0:1.3.10.2-15.el7_9
0:1.3.10.2-15.el7_9
389-ds-base-devel
Red Hat:enterprise_linux:7::server
 before 0:1.3.10.2-15.el7_9
0:1.3.10.2-15.el7_9
389-ds-base-snmp
Red Hat:enterprise_linux:7::server
 before 0:1.3.10.2-15.el7_9
0:1.3.10.2-15.el7_9
389-ds-base
Red Hat:enterprise_linux:7::workstation
 before 0:1.3.10.2-15.el7_9
0:1.3.10.2-15.el7_9
389-ds-base-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:1.3.10.2-15.el7_9
0:1.3.10.2-15.el7_9
389-ds-base-libs
Red Hat:enterprise_linux:7::workstation
 before 0:1.3.10.2-15.el7_9
0:1.3.10.2-15.el7_9
389-ds-base-devel
Red Hat:enterprise_linux:7::workstation
 before 0:1.3.10.2-15.el7_9
0:1.3.10.2-15.el7_9
389-ds-base-snmp
Red Hat:enterprise_linux:7::workstation
 before 0:1.3.10.2-15.el7_9
0:1.3.10.2-15.el7_9
389-ds-base
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.3.23-14.module+el8.5.0+14377+c731dc97
0:1.4.3.23-14.module+el8.5.0+14377+c731dc97
389-ds-base-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.3.23-14.module+el8.5.0+14377+c731dc97
0:1.4.3.23-14.module+el8.5.0+14377+c731dc97
389-ds-base-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.3.23-14.module+el8.5.0+14377+c731dc97
0:1.4.3.23-14.module+el8.5.0+14377+c731dc97
389-ds-base-devel
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.3.23-14.module+el8.5.0+14377+c731dc97
0:1.4.3.23-14.module+el8.5.0+14377+c731dc97
389-ds-base-legacy-tools
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.3.23-14.module+el8.5.0+14377+c731dc97
0:1.4.3.23-14.module+el8.5.0+14377+c731dc97
389-ds-base-legacy-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.3.23-14.module+el8.5.0+14377+c731dc97
0:1.4.3.23-14.module+el8.5.0+14377+c731dc97
389-ds-base-libs
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.3.23-14.module+el8.5.0+14377+c731dc97
0:1.4.3.23-14.module+el8.5.0+14377+c731dc97
389-ds-base-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.3.23-14.module+el8.5.0+14377+c731dc97
0:1.4.3.23-14.module+el8.5.0+14377+c731dc97
389-ds-base-snmp
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.3.23-14.module+el8.5.0+14377+c731dc97
0:1.4.3.23-14.module+el8.5.0+14377+c731dc97
389-ds-base-snmp-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.3.23-14.module+el8.5.0+14377+c731dc97
0:1.4.3.23-14.module+el8.5.0+14377+c731dc97
python3-lib389
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.3.23-14.module+el8.5.0+14377+c731dc97
0:1.4.3.23-14.module+el8.5.0+14377+c731dc97
389-ds-base
Red Hat:directory_server:11.3::el8
From an advisory covering 2 CVEs
 before 0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c
0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c
389-ds-base-debuginfo
Red Hat:directory_server:11.3::el8
From an advisory covering 2 CVEs
 before 0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c
0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c
389-ds-base-debugsource
Red Hat:directory_server:11.3::el8
From an advisory covering 2 CVEs
 before 0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c
0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c
389-ds-base-devel
Red Hat:directory_server:11.3::el8
From an advisory covering 2 CVEs
 before 0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c
0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c
389-ds-base-legacy-tools
Red Hat:directory_server:11.3::el8
From an advisory covering 2 CVEs
 before 0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c
0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c
389-ds-base-legacy-tools-debuginfo
Red Hat:directory_server:11.3::el8
From an advisory covering 2 CVEs
 before 0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c
0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c
389-ds-base-libs
Red Hat:directory_server:11.3::el8
From an advisory covering 2 CVEs
 before 0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c
0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c
389-ds-base-libs-debuginfo
Red Hat:directory_server:11.3::el8
From an advisory covering 2 CVEs
 before 0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c
0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c
389-ds-base-snmp
Red Hat:directory_server:11.3::el8
From an advisory covering 2 CVEs
 before 0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c
0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c
389-ds-base-snmp-debuginfo
Red Hat:directory_server:11.3::el8
From an advisory covering 2 CVEs
 before 0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c
0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c
cockpit-389-ds
Red Hat:directory_server:11.3::el8
From an advisory covering 2 CVEs
 before 0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c
0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c
python3-lib389
Red Hat:directory_server:11.3::el8
From an advisory covering 2 CVEs
 before 0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c
0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c
389-ds-base
Red Hat:rhel_eus:8.4::appstream
 before 0:1.4.3.16-20.module+el8.4.0+14552+b182c759
0:1.4.3.16-20.module+el8.4.0+14552+b182c759
389-ds-base-debuginfo
Red Hat:rhel_eus:8.4::appstream
 before 0:1.4.3.16-20.module+el8.4.0+14552+b182c759
0:1.4.3.16-20.module+el8.4.0+14552+b182c759
389-ds-base-debugsource
Red Hat:rhel_eus:8.4::appstream
 before 0:1.4.3.16-20.module+el8.4.0+14552+b182c759
0:1.4.3.16-20.module+el8.4.0+14552+b182c759
389-ds-base-devel
Red Hat:rhel_eus:8.4::appstream
 before 0:1.4.3.16-20.module+el8.4.0+14552+b182c759
0:1.4.3.16-20.module+el8.4.0+14552+b182c759
389-ds-base-legacy-tools
Red Hat:rhel_eus:8.4::appstream
 before 0:1.4.3.16-20.module+el8.4.0+14552+b182c759
0:1.4.3.16-20.module+el8.4.0+14552+b182c759
389-ds-base-legacy-tools-debuginfo
Red Hat:rhel_eus:8.4::appstream
 before 0:1.4.3.16-20.module+el8.4.0+14552+b182c759
0:1.4.3.16-20.module+el8.4.0+14552+b182c759
389-ds-base-libs
Red Hat:rhel_eus:8.4::appstream
 before 0:1.4.3.16-20.module+el8.4.0+14552+b182c759
0:1.4.3.16-20.module+el8.4.0+14552+b182c759
389-ds-base-libs-debuginfo
Red Hat:rhel_eus:8.4::appstream
 before 0:1.4.3.16-20.module+el8.4.0+14552+b182c759
0:1.4.3.16-20.module+el8.4.0+14552+b182c759
389-ds-base-snmp
Red Hat:rhel_eus:8.4::appstream
 before 0:1.4.3.16-20.module+el8.4.0+14552+b182c759
0:1.4.3.16-20.module+el8.4.0+14552+b182c759
389-ds-base-snmp-debuginfo
Red Hat:rhel_eus:8.4::appstream
 before 0:1.4.3.16-20.module+el8.4.0+14552+b182c759
0:1.4.3.16-20.module+el8.4.0+14552+b182c759
python3-lib389
Red Hat:rhel_eus:8.4::appstream
 before 0:1.4.3.16-20.module+el8.4.0+14552+b182c759
0:1.4.3.16-20.module+el8.4.0+14552+b182c759
389-ds-base
Rocky Linux:8
 before 0:1.4.3.23-14.module+el8.5.0+745+c5be6847
0:1.4.3.23-14.module+el8.5.0+745+c5be6847
389-ds
SUSE:Linux Enterprise Module for Server Applications 15 SP3
From an advisory covering 2 CVEs
 before 1.4.4.19~git38.9951c1101-150300.3.17.1
1.4.4.19~git38.9951c1101-150300.3.17.1
389-ds
openSUSE:Leap 15.3
From an advisory covering 2 CVEs
 before 1.4.4.19~git38.9951c1101-150300.3.17.1
1.4.4.19~git38.9951c1101-150300.3.17.1
389-ds
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
From an advisory covering 2 CVEs
 before 1.4.3.30~git2.ca761af4b-150200.3.29.1
1.4.3.30~git2.ca761af4b-150200.3.29.1
389-ds
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 2 CVEs
 before 1.4.3.30~git2.ca761af4b-150200.3.29.1
1.4.3.30~git2.ca761af4b-150200.3.29.1
389-ds
SUSE:Linux Enterprise Server 15 SP2-BCL
From an advisory covering 2 CVEs
 before 1.4.3.30~git2.ca761af4b-150200.3.29.1
1.4.3.30~git2.ca761af4b-150200.3.29.1
389-ds
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 2 CVEs
 before 1.4.3.30~git2.ca761af4b-150200.3.29.1
1.4.3.30~git2.ca761af4b-150200.3.29.1
389-ds
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 2 CVEs
 before 1.4.3.30~git2.ca761af4b-150200.3.29.1
1.4.3.30~git2.ca761af4b-150200.3.29.1
389-ds
SUSE:Manager Proxy 4.1
From an advisory covering 2 CVEs
 before 1.4.3.30~git2.ca761af4b-150200.3.29.1
1.4.3.30~git2.ca761af4b-150200.3.29.1
389-ds
SUSE:Manager Retail Branch Server 4.1
From an advisory covering 2 CVEs
 before 1.4.3.30~git2.ca761af4b-150200.3.29.1
1.4.3.30~git2.ca761af4b-150200.3.29.1
389-ds
SUSE:Manager Server 4.1
From an advisory covering 2 CVEs
 before 1.4.3.30~git2.ca761af4b-150200.3.29.1
1.4.3.30~git2.ca761af4b-150200.3.29.1
389-ds
SUSE:Enterprise Storage 7
From an advisory covering 2 CVEs
 before 1.4.3.30~git2.ca761af4b-150200.3.29.1
1.4.3.30~git2.ca761af4b-150200.3.29.1
389-ds
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 3 CVEs
 before 1.4.0.31~git15.8b9843b0b-150000.4.27.1
1.4.0.31~git15.8b9843b0b-150000.4.27.1
389-ds
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 3 CVEs
 before 1.4.0.31~git15.8b9843b0b-150000.4.27.1
1.4.0.31~git15.8b9843b0b-150000.4.27.1
389-ds
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 3 CVEs
 before 1.4.0.31~git15.8b9843b0b-150000.4.27.1
1.4.0.31~git15.8b9843b0b-150000.4.27.1
389-ds
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 3 CVEs
 before 1.4.0.31~git15.8b9843b0b-150000.4.27.1
1.4.0.31~git15.8b9843b0b-150000.4.27.1
389-ds
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 5 CVEs
 before 1.4.2.16~git68.efa843752-150100.7.34.1
1.4.2.16~git68.efa843752-150100.7.34.1
389-ds
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 5 CVEs
 before 1.4.2.16~git68.efa843752-150100.7.34.1
1.4.2.16~git68.efa843752-150100.7.34.1
389-ds
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 5 CVEs
 before 1.4.2.16~git68.efa843752-150100.7.34.1
1.4.2.16~git68.efa843752-150100.7.34.1
389-ds
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 5 CVEs
 before 1.4.2.16~git68.efa843752-150100.7.34.1
1.4.2.16~git68.efa843752-150100.7.34.1
389-ds
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 5 CVEs
 before 1.4.2.16~git68.efa843752-150100.7.34.1
1.4.2.16~git68.efa843752-150100.7.34.1
389-ds
SUSE:Enterprise Storage 6
From an advisory covering 5 CVEs
 before 1.4.2.16~git68.efa843752-150100.7.34.1
1.4.2.16~git68.efa843752-150100.7.34.1
389-ds
SUSE:Linux Enterprise Module for Server Applications 15 SP4
From an advisory covering 2 CVEs
 before 2.0.15~git26.1ea6a6803-150400.3.5.1
2.0.15~git26.1ea6a6803-150400.3.5.1
389-ds
openSUSE:Leap 15.4
From an advisory covering 2 CVEs
 before 2.0.15~git26.1ea6a6803-150400.3.5.1
2.0.15~git26.1ea6a6803-150400.3.5.1
389-ds-base
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.3.3.12-1build11.3.3.13-11.3.4.5-21.3.4.8-11.3.4.8-3
Show 4 moreShow less
1.3.4.8-3ubuntu11.3.4.8-41.3.4.9-11.3.4.9-1ubuntu0.1~esm1
 None known
389-ds-base
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.3.7.5-11.3.7.5-1build11.3.7.5-1build21.3.7.9-11.3.7.10-11.3.7.10-1ubuntu11.3.7.10-1ubuntu1+esm1
 None known
389-ds-base
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
1.4.1.6-41.4.1.6-4build11.4.2.4-11.4.2.4-1build11.4.3.2-11.4.3.2-1build11.4.3.6-21.4.3.6-2ubuntu0.1~esm1
 None known
389-ds-base
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.4.4.11-2build11.4.4.11-2build21.4.4.17-12.0.11-22.0.14-12.0.15-12.0.15-1ubuntu2
 None known
389-ds-base
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.3.4+dfsg1-12.4.4+dfsg1-1ubuntu12.4.4+dfsg1-1ubuntu42.4.4+dfsg1-32.4.5+dfsg1-1
 None known
389-ds-base
Ubuntu:25.10
 All versions, plus listed versions
3.1.2+dfsg1-1
 None known
389-ds-base
Ubuntu:26.10
 All versions, plus listed versions
3.1.2+vendor1-23.1.2+vendor1-2build13.3.1-3
 None known
389-ds-base
Ubuntu:26.04:LTS
 All versions, plus listed versions
3.1.2+dfsg1-13.1.2+vendor1-2
 None known

History

History
RecordedChangedSources
affected
facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-4091 is a high vulnerability (CVSS 7.5) in Port389 389-ds-base, published February 18, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.01%, the 81st percentile. Fixed in 389-ds-base 1.4.3.23-14.module_el8.5.0+2628+c731dc97.

References

Show 47 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open