{"id":"CVE-2020-35518","aliases":["DEBIAN-CVE-2020-35518","EUVD-2020-23185","GHSA-vg4h-9m5m-rchq","OESA-2022-1602","OESA-2022-2056","RHSA-2021:0599","RHSA-2021:1086","RHSA-2021:1243","RHSA-2021:1258","RHSA-2021:2323","SUSE-SU-2021:0724-1","UBUNTU-CVE-2020-35518","USN-5231-1","openSUSE-SU-2021:0418-1"],"status":"published","title":"When binding against a DN during authentication, the reply from 389-ds-base will be different...","description":"When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01538,"percentile":0.75057,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200","CWE-203"],"published":"2021-03-08T15:47:06Z","modified":"2026-10-26T12:02:13Z","fixes":[{"ecosystem":"Debian:12","package":"389-ds-base","fixed_in":["1.4.4.10-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"389-ds-base","fixed_in":["1.4.4.10-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"three-eight-nine-ds-base","fixed_in":["389-ds-base-1.4.3.20-1.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"three-eight-nine-ds-base","fixed_in":["389-ds-base-1.4.3.20-1.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"three-eight-nine-ds-base","fixed_in":["389-ds-base-1.4.3.20-1.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"three-eight-nine-ds-base","fixed_in":["389-ds-base-1.4.3.20-1.oe2203"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.1::el8","package":"389-ds-base","fixed_in":["0:1.4.2.12-5.module+el8dsrv+9896+eb95346c"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.1::el8","package":"389-ds-base-debuginfo","fixed_in":["0:1.4.2.12-5.module+el8dsrv+9896+eb95346c"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.1::el8","package":"389-ds-base-debugsource","fixed_in":["0:1.4.2.12-5.module+el8dsrv+9896+eb95346c"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.1::el8","package":"389-ds-base-devel","fixed_in":["0:1.4.2.12-5.module+el8dsrv+9896+eb95346c"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.1::el8","package":"389-ds-base-legacy-tools","fixed_in":["0:1.4.2.12-5.module+el8dsrv+9896+eb95346c"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.1::el8","package":"389-ds-base-legacy-tools-debuginfo","fixed_in":["0:1.4.2.12-5.module+el8dsrv+9896+eb95346c"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.1::el8","package":"389-ds-base-libs","fixed_in":["0:1.4.2.12-5.module+el8dsrv+9896+eb95346c"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.1::el8","package":"389-ds-base-libs-debuginfo","fixed_in":["0:1.4.2.12-5.module+el8dsrv+9896+eb95346c"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.1::el8","package":"389-ds-base-snmp","fixed_in":["0:1.4.2.12-5.module+el8dsrv+9896+eb95346c"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.1::el8","package":"389-ds-base-snmp-debuginfo","fixed_in":["0:1.4.2.12-5.module+el8dsrv+9896+eb95346c"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.1::el8","package":"cockpit-389-ds","fixed_in":["0:1.4.2.12-5.module+el8dsrv+9896+eb95346c"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.1::el8","package":"python3-lib389","fixed_in":["0:1.4.2.12-5.module+el8dsrv+9896+eb95346c"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base","fixed_in":["0:1.4.3.8-7.module+el8.3.0+10310+6e88d919"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-debuginfo","fixed_in":["0:1.4.3.8-7.module+el8.3.0+10310+6e88d919"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-debugsource","fixed_in":["0:1.4.3.8-7.module+el8.3.0+10310+6e88d919"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-devel","fixed_in":["0:1.4.3.8-7.module+el8.3.0+10310+6e88d919"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-legacy-tools","fixed_in":["0:1.4.3.8-7.module+el8.3.0+10310+6e88d919"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-legacy-tools-debuginfo","fixed_in":["0:1.4.3.8-7.module+el8.3.0+10310+6e88d919"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-libs","fixed_in":["0:1.4.3.8-7.module+el8.3.0+10310+6e88d919"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-libs-debuginfo","fixed_in":["0:1.4.3.8-7.module+el8.3.0+10310+6e88d919"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-snmp","fixed_in":["0:1.4.3.8-7.module+el8.3.0+10310+6e88d919"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-snmp-debuginfo","fixed_in":["0:1.4.3.8-7.module+el8.3.0+10310+6e88d919"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-lib389","fixed_in":["0:1.4.3.8-7.module+el8.3.0+10310+6e88d919"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.2::el8","package":"389-ds-base","fixed_in":["0:1.4.3.21-3.module+el8dsrv+10401+3d549418"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.2::el8","package":"389-ds-base-debuginfo","fixed_in":["0:1.4.3.21-3.module+el8dsrv+10401+3d549418"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.2::el8","package":"389-ds-base-debugsource","fixed_in":["0:1.4.3.21-3.module+el8dsrv+10401+3d549418"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.2::el8","package":"389-ds-base-devel","fixed_in":["0:1.4.3.21-3.module+el8dsrv+10401+3d549418"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.2::el8","package":"389-ds-base-legacy-tools","fixed_in":["0:1.4.3.21-3.module+el8dsrv+10401+3d549418"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.2::el8","package":"389-ds-base-legacy-tools-debuginfo","fixed_in":["0:1.4.3.21-3.module+el8dsrv+10401+3d549418"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.2::el8","package":"389-ds-base-libs","fixed_in":["0:1.4.3.21-3.module+el8dsrv+10401+3d549418"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.2::el8","package":"389-ds-base-libs-debuginfo","fixed_in":["0:1.4.3.21-3.module+el8dsrv+10401+3d549418"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.2::el8","package":"389-ds-base-snmp","fixed_in":["0:1.4.3.21-3.module+el8dsrv+10401+3d549418"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.2::el8","package":"389-ds-base-snmp-debuginfo","fixed_in":["0:1.4.3.21-3.module+el8dsrv+10401+3d549418"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.2::el8","package":"cockpit-389-ds","fixed_in":["0:1.4.3.21-3.module+el8dsrv+10401+3d549418"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.2::el8","package":"python3-lib389","fixed_in":["0:1.4.3.21-3.module+el8dsrv+10401+3d549418"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base","fixed_in":["0:1.4.2.4-13.module+el8.2.0+10648+abe88955"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-debuginfo","fixed_in":["0:1.4.2.4-13.module+el8.2.0+10648+abe88955"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-debugsource","fixed_in":["0:1.4.2.4-13.module+el8.2.0+10648+abe88955"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-devel","fixed_in":["0:1.4.2.4-13.module+el8.2.0+10648+abe88955"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-legacy-tools","fixed_in":["0:1.4.2.4-13.module+el8.2.0+10648+abe88955"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-legacy-tools-debuginfo","fixed_in":["0:1.4.2.4-13.module+el8.2.0+10648+abe88955"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-libs","fixed_in":["0:1.4.2.4-13.module+el8.2.0+10648+abe88955"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-libs-debuginfo","fixed_in":["0:1.4.2.4-13.module+el8.2.0+10648+abe88955"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-snmp","fixed_in":["0:1.4.2.4-13.module+el8.2.0+10648+abe88955"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-snmp-debuginfo","fixed_in":["0:1.4.2.4-13.module+el8.2.0+10648+abe88955"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"python3-lib389","fixed_in":["0:1.4.2.4-13.module+el8.2.0+10648+abe88955"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base","fixed_in":["0:1.3.10.2-12.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-debuginfo","fixed_in":["0:1.3.10.2-12.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-devel","fixed_in":["0:1.3.10.2-12.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-libs","fixed_in":["0:1.3.10.2-12.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-snmp","fixed_in":["0:1.3.10.2-12.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base","fixed_in":["0:1.3.10.2-12.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-debuginfo","fixed_in":["0:1.3.10.2-12.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-devel","fixed_in":["0:1.3.10.2-12.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-libs","fixed_in":["0:1.3.10.2-12.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-snmp","fixed_in":["0:1.3.10.2-12.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base","fixed_in":["0:1.3.10.2-12.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-debuginfo","fixed_in":["0:1.3.10.2-12.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-libs","fixed_in":["0:1.3.10.2-12.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-devel","fixed_in":["0:1.3.10.2-12.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-snmp","fixed_in":["0:1.3.10.2-12.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base","fixed_in":["0:1.3.10.2-12.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-debuginfo","fixed_in":["0:1.3.10.2-12.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-libs","fixed_in":["0:1.3.10.2-12.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-devel","fixed_in":["0:1.3.10.2-12.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-snmp","fixed_in":["0:1.3.10.2-12.el7_9"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"389-ds","fixed_in":["1.4.3.19~git0.bef0b5bed-3.12.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"389-ds-base","fixed_in":["1.4.3.6-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"389-ds","fixed_in":["1.4.3.19~git0.bef0b5bed-lp152.2.12.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4.10-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4.10-1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"three-eight-nine-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"389-ds-base-1.4.3.20-1.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"three-eight-nine-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"389-ds-base-1.4.3.20-1.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"three-eight-nine-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"389-ds-base-1.4.3.20-1.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"three-eight-nine-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"389-ds-base-1.4.3.20-1.oe2203"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.1::el8","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.12-5.module+el8dsrv+9896+eb95346c"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.1::el8","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.12-5.module+el8dsrv+9896+eb95346c"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.1::el8","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.12-5.module+el8dsrv+9896+eb95346c"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.1::el8","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.12-5.module+el8dsrv+9896+eb95346c"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.1::el8","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.12-5.module+el8dsrv+9896+eb95346c"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.1::el8","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.12-5.module+el8dsrv+9896+eb95346c"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.1::el8","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.12-5.module+el8dsrv+9896+eb95346c"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.1::el8","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.12-5.module+el8dsrv+9896+eb95346c"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.1::el8","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.12-5.module+el8dsrv+9896+eb95346c"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.1::el8","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.12-5.module+el8dsrv+9896+eb95346c"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.1::el8","package":"cockpit-389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.12-5.module+el8dsrv+9896+eb95346c"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.1::el8","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.12-5.module+el8dsrv+9896+eb95346c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.8-7.module+el8.3.0+10310+6e88d919"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.8-7.module+el8.3.0+10310+6e88d919"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.8-7.module+el8.3.0+10310+6e88d919"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.8-7.module+el8.3.0+10310+6e88d919"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.8-7.module+el8.3.0+10310+6e88d919"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.8-7.module+el8.3.0+10310+6e88d919"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.8-7.module+el8.3.0+10310+6e88d919"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.8-7.module+el8.3.0+10310+6e88d919"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.8-7.module+el8.3.0+10310+6e88d919"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.8-7.module+el8.3.0+10310+6e88d919"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.8-7.module+el8.3.0+10310+6e88d919"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.2::el8","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.21-3.module+el8dsrv+10401+3d549418"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.2::el8","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.21-3.module+el8dsrv+10401+3d549418"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.2::el8","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.21-3.module+el8dsrv+10401+3d549418"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.2::el8","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.21-3.module+el8dsrv+10401+3d549418"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.2::el8","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.21-3.module+el8dsrv+10401+3d549418"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.2::el8","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.21-3.module+el8dsrv+10401+3d549418"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.2::el8","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.21-3.module+el8dsrv+10401+3d549418"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.2::el8","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.21-3.module+el8dsrv+10401+3d549418"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.2::el8","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.21-3.module+el8dsrv+10401+3d549418"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.2::el8","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.21-3.module+el8dsrv+10401+3d549418"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.2::el8","package":"cockpit-389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.21-3.module+el8dsrv+10401+3d549418"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.2::el8","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.21-3.module+el8dsrv+10401+3d549418"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-13.module+el8.2.0+10648+abe88955"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-13.module+el8.2.0+10648+abe88955"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-13.module+el8.2.0+10648+abe88955"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-13.module+el8.2.0+10648+abe88955"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-13.module+el8.2.0+10648+abe88955"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-13.module+el8.2.0+10648+abe88955"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-13.module+el8.2.0+10648+abe88955"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-13.module+el8.2.0+10648+abe88955"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-13.module+el8.2.0+10648+abe88955"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-13.module+el8.2.0+10648+abe88955"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-13.module+el8.2.0+10648+abe88955"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-12.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-12.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-12.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-12.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-12.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-12.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-12.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-12.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-12.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-12.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-12.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-12.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-12.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-12.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-12.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-12.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-12.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-12.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-12.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-12.el7_9"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.19~git0.bef0b5bed-3.12.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.6-2ubuntu0.1~esm1"}]}],"versions":["1.4.1.6-4","1.4.1.6-4build1","1.4.2.4-1","1.4.2.4-1build1","1.4.3.2-1","1.4.3.2-1build1","1.4.3.6-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4.9-1ubuntu0.1~esm1"}]}],"versions":["1.3.3.12-1build1","1.3.3.13-1","1.3.4.5-2","1.3.4.8-1","1.3.4.8-3","1.3.4.8-3ubuntu1","1.3.4.8-4","1.3.4.9-1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.7.10-1ubuntu1+esm1"}]}],"versions":["1.3.7.5-1","1.3.7.5-1build1","1.3.7.5-1build2","1.3.7.9-1","1.3.7.10-1","1.3.7.10-1ubuntu1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.6-2ubuntu0.1~esm1"}]}],"versions":["1.4.1.6-4","1.4.1.6-4build1","1.4.2.4-1","1.4.2.4-1build1","1.4.3.2-1","1.4.3.2-1build1","1.4.3.6-2"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.19~git0.bef0b5bed-lp152.2.12.1"}]}]}],"products":[{"vendor":"redhat","product":"389_directory_server"},{"vendor":"redhat","product":"directory_server"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1905565","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Vendor Advisory","fix","report"]},{"url":"https://github.com/389ds/389-ds-base/issues/4480","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://github.com/389ds/389-ds-base/commit/cc0f69283abc082488824702dae485b8eae938bc","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/389ds/389-ds-base/commit/b6aae4d8e7c8a6ddd21646f94fef1bf7f22c3f32","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-35518","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-vg4h-9m5m-rchq"},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-35518","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1602","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2056","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0599","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1909675","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1923217","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0599.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-35518","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-35518","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1086","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1908705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1912481","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1936461","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1086.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1243","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1751082","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1859215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1859288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1927051","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1930272","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1937036","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1243.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1258","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1946631","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1946632","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1946634","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1258.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2323","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1931182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1953673","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2323.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210724-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1181159","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35518","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-35518","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5231-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-3514","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IJZAIJRIBNKFP5CET6TYMJ3FGMU6WYAM/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-35518","description":"When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.","status":"published","published":"2021-03-26T16:43:08Z","modified":"2024-08-04T17:02:08.248Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:35:57.975444Z"}],"euvd":[{"id":"EUVD-2020-23185","description":"When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.","status":"published","published":"2021-03-26T16:43:08Z","modified":"2024-08-04T17:02:08Z","updated_at":"2026-11-03T03:07:06.389211Z"}],"ghsa":[{"id":"GHSA-vg4h-9m5m-rchq","title":"When binding against a DN during authentication, the reply from 389-ds-base will be different...","description":"When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.","status":"published","published":"2022-05-24T17:45:30Z","modified":"2023-01-27T05:03:30Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-200","CWE-203"],"updated_at":"2026-11-02T14:42:15.698999Z"}],"nvd":[{"id":"CVE-2020-35518","description":"When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.","status":"published","published":"2021-03-26T17:15:12.28Z","modified":"2026-06-17T03:13:51.177Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200","CWE-203"],"updated_at":"2026-11-02T14:06:37.687844Z"}],"osv":[{"id":"CVE-2020-35518","description":"When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.","status":"published","published":"2021-03-26T17:15:12.28Z","modified":"2026-10-20T14:00:23.501229377Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:16.612899Z"},{"id":"DEBIAN-CVE-2020-35518","description":"When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.","status":"published","published":"2021-03-26T17:15:12.28Z","modified":"2026-10-26T12:02:13.75170255Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:34.019707Z"},{"id":"OESA-2022-1602","title":"three-eight-nine-ds-base security update","description":"389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration.\r\n\r\nSecurity Fix(es):\r\n\r\nWhen binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.(CVE-2020-35518)","status":"published","published":"2022-03-26T11:04:52Z","modified":"2026-08-18T01:15:59.135093881Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2022-2056","title":"three-eight-nine-ds-base security update","description":"389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration.\r\n\r\nSecurity Fix(es):\r\n\r\nWhen binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.(CVE-2020-35518)","status":"published","published":"2022-11-11T11:05:22Z","modified":"2026-08-18T01:17:21.527663369Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2021:0599","title":"Red Hat Security Advisory: redhat-ds:11 security and bug fix update","status":"published","published":"2024-09-16T05:22:31Z","modified":"2026-06-27T10:12:49Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:1086","title":"Red Hat Security Advisory: 389-ds:1.4 security and bug fix update","status":"published","published":"2024-09-16T05:22:39Z","modified":"2026-06-27T10:13:12Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:1243","title":"Red Hat Security Advisory: redhat-ds:11 security and bug fix update","status":"published","published":"2024-09-16T05:22:47Z","modified":"2026-06-27T10:13:16Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:1258","title":"Red Hat Security Advisory: 389-ds:1.4 security and bug fix update","status":"published","published":"2024-09-16T05:22:55Z","modified":"2026-06-27T10:13:16Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:2323","title":"Red Hat Security Advisory: 389-ds-base security and bug fix update","status":"published","published":"2024-09-16T05:23:03Z","modified":"2026-06-27T10:13:47Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"UBUNTU-CVE-2020-35518","description":"When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.","status":"published","published":"2021-03-26T17:15:00Z","modified":"2026-04-22T12:40:22.897721Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:25.179924Z"},{"id":"openSUSE-SU-2021:0418-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\n- 389-ds was updated to version 1.4.3.19 \n   - CVE-2020-35518: Fixed an information disclosure during the binding of a DN (bsc#1181159).\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2021-03-16T17:06:40Z","modified":"2025-05-07T18:12:06.593821Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"SUSE-SU-2021:0724-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\n- 389-ds was updated to version 1.4.3.19 \n   - CVE-2020-35518: Fixed an information disclosure during the binding of a DN (bsc#1181159).\n","status":"published","published":"2021-03-08T15:47:06Z","modified":"2026-02-04T02:16:44.892501Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"USN-5231-1","title":"389-ds-base vulnerabilities","description":"It was discovered that 389 Directory Server presented to users, during\nauthentication, an error message which could be used to discover if a\ncertain LDAP DN existed or not. A remote unauthenticated attacker could\npossibly use this to check the existence of an entry in a LDAP database\nand expose sensitive information. This issue affected only Ubuntu 20.04\nESM. (CVE-2020-35518)\n\nIt was discovered that 389 Directory Server was incorrectly validating\ndata used to access memory addresses. An authenticated attacker using a\nSyncrepl client could use this issue with a specially crafted query to\ncause 389 Directory Server to crash, resulting in a denial of service.\n(CVE-2021-3514)\n","status":"published","published":"2022-07-18T10:09:50Z","modified":"2026-06-25T13:30:56.127704724Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}