{"id":"CVE-2021-3514","aliases":["DEBIAN-CVE-2021-3514","DLA-3399-1","EUVD-2021-26832","GHSA-4mjm-c95j-8748","RHSA-2021:2595","RHSA-2021:2796","RHSA-2021:3955","RHSA-2022:0952","RLSA-2021:2595","SUSE-SU-2021:1878-1","UBUNTU-CVE-2021-3514","USN-5231-1","openSUSE-SU-2021:0868-1"],"status":"published","title":"When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer...","description":"When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.012,"percentile":0.68435,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2021-05-28T00:00:00Z","modified":"2026-10-23T18:03:49Z","fixes":[{"ecosystem":"Debian:12","package":"389-ds-base","fixed_in":["1.4.4.11-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"389-ds-base","fixed_in":["1.4.4.11-2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base","fixed_in":["0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-debuginfo","fixed_in":["0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-debugsource","fixed_in":["0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-devel","fixed_in":["0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-legacy-tools","fixed_in":["0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-legacy-tools-debuginfo","fixed_in":["0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-libs","fixed_in":["0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-libs-debuginfo","fixed_in":["0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-snmp","fixed_in":["0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-snmp-debuginfo","fixed_in":["0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-lib389","fixed_in":["0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base","fixed_in":["0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-debuginfo","fixed_in":["0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-debugsource","fixed_in":["0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-devel","fixed_in":["0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-legacy-tools","fixed_in":["0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-legacy-tools-debuginfo","fixed_in":["0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-libs","fixed_in":["0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-libs-debuginfo","fixed_in":["0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-snmp","fixed_in":["0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-snmp-debuginfo","fixed_in":["0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"python3-lib389","fixed_in":["0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"389-ds-base","fixed_in":["0:1.4.3.16-16.module+el8.4.0+596+159889e5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"389-ds","fixed_in":["1.4.3.23~git0.f53d0132b-3.15.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"389-ds-base","fixed_in":["1.3.4.9-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"389-ds-base","fixed_in":["1.3.7.10-1ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"389-ds-base","fixed_in":["1.4.3.6-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"389-ds","fixed_in":["1.4.3.23~git0.f53d0132b-lp152.2.15.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4.11-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4.11-2"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0.21-1+deb10u1"}]}],"versions":["1.4.0.21-1"],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.4::el8","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.4::el8","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.4::el8","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.4::el8","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.4::el8","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.4::el8","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.4::el8","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.4::el8","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.4::el8","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.4::el8","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.4::el8","package":"cockpit-389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.4::el8","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.3::el8","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.3::el8","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.3::el8","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.3::el8","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.3::el8","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.3::el8","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.3::el8","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.3::el8","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.3::el8","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.3::el8","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.3::el8","package":"cockpit-389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.3::el8","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-16.module+el8.4.0+596+159889e5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.23~git0.f53d0132b-3.15.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4.9-1ubuntu0.1~esm1"}]}],"versions":["1.3.3.12-1build1","1.3.3.13-1","1.3.4.5-2","1.3.4.8-1","1.3.4.8-3","1.3.4.8-3ubuntu1","1.3.4.8-4","1.3.4.9-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.7.10-1ubuntu1+esm1"}]}],"versions":["1.3.7.5-1","1.3.7.5-1build1","1.3.7.5-1build2","1.3.7.9-1","1.3.7.10-1","1.3.7.10-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.6-2ubuntu0.1~esm1"}]}],"versions":["1.4.1.6-4","1.4.1.6-4build1","1.4.2.4-1","1.4.2.4-1build1","1.4.3.2-1","1.4.3.2-1build1","1.4.3.6-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4.9-1ubuntu0.1~esm1"}]}],"versions":["1.3.3.12-1build1","1.3.3.13-1","1.3.4.5-2","1.3.4.8-1","1.3.4.8-3","1.3.4.8-3ubuntu1","1.3.4.8-4","1.3.4.9-1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.7.10-1ubuntu1+esm1"}]}],"versions":["1.3.7.5-1","1.3.7.5-1build1","1.3.7.5-1build2","1.3.7.9-1","1.3.7.10-1","1.3.7.10-1ubuntu1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.6-2ubuntu0.1~esm1"}]}],"versions":["1.4.1.6-4","1.4.1.6-4build1","1.4.2.4-1","1.4.2.4-1build1","1.4.3.2-1","1.4.3.2-1build1","1.4.3.6-2"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.23~git0.f53d0132b-lp152.2.15.1"}]}]}],"products":[{"vendor":"redhat","product":"389_directory_server"}],"references":[{"url":"https://github.com/389ds/389-ds-base/issues/4711","tags":["x_transferred","Third Party Advisory","advisory","article","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/04/msg00026.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3514","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-4mjm-c95j-8748"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-3514","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2595","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952907","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1960720","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1968588","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1970791","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972738","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2595.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3514","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3514","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2796","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1960723","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2796.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3955","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_directory_server/11/html/release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1902303","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1903350","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1931820","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1947469","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1951537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1955658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1974226","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1974243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979612","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981833","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1982782","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3955.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3652","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3652","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3652","tags":["advisory"]},{"url":"https://github.com/389ds/389-ds-base/issues/4817","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0952","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2022086","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2022090","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2022686","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040794","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0952.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4091","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4091","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4091","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:2595","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211878-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1185356","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3514","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-3514","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5231-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-35518","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DGKRCMKIKM4Z423PIZY3DK2A4ZMBRUNT/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-3514","description":"When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash.","status":"published","published":"2021-05-28T00:00:00Z","modified":"2024-08-03T16:53:17.927Z","cwes":["CWE-476"],"updated_at":"2026-11-02T14:33:03.671751Z"}],"euvd":[{"id":"EUVD-2021-26832","description":"When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash.","status":"published","published":"2021-05-28T00:00:00Z","modified":"2024-08-03T16:53:17Z","updated_at":"2026-11-03T03:25:13.052236Z"}],"ghsa":[{"id":"GHSA-4mjm-c95j-8748","title":"When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer...","description":"When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash.","status":"published","published":"2022-05-24T19:03:36Z","modified":"2023-05-02T05:08:34Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:54:34.500941Z"}],"nvd":[{"id":"CVE-2021-3514","description":"When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash.","status":"published","published":"2021-05-28T15:15:09.253Z","modified":"2026-06-17T04:05:16.263Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:06:53.987491Z"}],"osv":[{"id":"CVE-2021-3514","description":"When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash.","status":"published","published":"2021-05-28T15:15:09Z","modified":"2026-04-10T04:35:00.873747Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:20.13324Z"},{"id":"DEBIAN-CVE-2021-3514","description":"When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash.","status":"published","published":"2021-05-28T15:15:09.253Z","modified":"2026-10-23T18:03:49.636388893Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:35.233346Z"},{"id":"RHSA-2021:2595","title":"Red Hat Security Advisory: 389-ds:1.4 security and bug fix update","status":"published","published":"2024-09-16T05:54:56Z","modified":"2026-06-27T10:13:51Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:2796","title":"Red Hat Security Advisory: 389-ds:1.4 security update","status":"published","published":"2024-09-16T05:55:03Z","modified":"2026-06-27T10:13:55Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3955","title":"Red Hat Security Advisory: redhat-ds:11 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T06:08:36Z","modified":"2026-06-27T10:14:15Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2022:0952","title":"Red Hat Security Advisory: redhat-ds:11.3 security and bug fix update","status":"published","published":"2024-09-16T07:02:35Z","modified":"2026-06-27T10:14:50Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RLSA-2021:2595","title":"Moderate: 389-ds:1.4 security and bug fix update","description":"389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. \n\nSecurity Fix(es):\n\n* 389-ds-base: sync_repl NULL pointer dereference in sync_create_state_control() (CVE-2021-3514)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* ACIs are being evaluated against the Replication Manager account in a replication context. (BZ#1968588)\n\n* A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule (BZ#1970791)\n\n* Large updates can reset the CLcache to the beginning of the changelog (BZ#1972721)\n\n* Changelog cache can upload updates from a wrong starting point (CSN) (BZ#1972738)","status":"published","published":"2021-06-29T14:00:08Z","modified":"2026-02-04T15:30:15.944709Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2021-3514","description":"When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash.","status":"published","published":"2021-05-28T15:15:00Z","modified":"2026-04-22T12:55:24.626304Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:27.870979Z"},{"id":"DLA-3399-1","title":"389-ds-base - security update","status":"published","published":"2023-04-24T00:00:00Z","modified":"2026-03-09T01:20:05.255613Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"openSUSE-SU-2021:0868-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\n- CVE-2021-3514: Fixed a sync_repl NULL pointer dereference in sync_create_state_control() (bsc#1185356)\n\n389-ds was updated to version 1.4.3.23~git0.f53d0132b:\n\nBump version to 1.4.3.23:\n\n* Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)\n* Issue 4759 - Fix coverity issue (#4760)\n* Issue 4656 - Fix cherry pick error around replication enabling\n* Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)\n* Issue 4742 - UI - should always use LDAPI path when calling CLI\n* Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)\n* Issue 4711 - SIGSEV with sync_repl (#4738)\n* Issue 4649 - fix testcase importing ContentSyncPlugin\n* Issue 2736 - Warnings from automatic shebang munging macro\n* Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736\n* Issue 4706 - negative wtime in access log for CMP operations\n\nBump version to 1.4.3.22:\n\n* Issue 4671 - UI - Fix browser crashes\n* lib389 - Add ContentSyncPlugin class\n* Issue 4656 - lib389 - fix cherry pick error\n* Issue 4229 - Fix Rust linking\n* Issue 4658 - monitor - connection start date is incorrect\n* Issue 2621 - lib389 - backport ds_supports_new_changelog()\n* Issue 4656 - Make replication CLI backwards compatible with role name change\n* Issue 4656 - Remove problematic language from UI/CLI/lib389\n* Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down\n* Issue 4663 - CLI - unable to add objectclass/attribute without x-origin\n\nBump version to 1.4.3.21:\n\n* Issue 4169 - UI - updates on the tuning page are not reflected in the UI\n* Issue 4588 - BUG - unable to compile without xcrypt (#4589)\n* Issue 4513 - Fix replication CI test failures (#4557)\n* Issue 4646 - CLI/UI - revise DNA plugin management\n* Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)\n* Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)\n* Issue 4615 - log message when psearch first exceeds max threads per conn\n\nBump version to 1.4.3.20:\n\n* Issue 4324 - Some architectures the cache line size file does not exist\n* Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2021-06-11T14:06:53Z","modified":"2026-02-04T03:39:47.167656Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"SUSE-SU-2021:1878-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\n- CVE-2021-3514: Fixed a sync_repl NULL pointer dereference in sync_create_state_control() (bsc#1185356)\n\n389-ds was updated to version 1.4.3.23~git0.f53d0132b:\n\nBump version to 1.4.3.23:\n\n* Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)\n* Issue 4759 - Fix coverity issue (#4760)\n* Issue 4656 - Fix cherry pick error around replication enabling\n* Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)\n* Issue 4742 - UI - should always use LDAPI path when calling CLI\n* Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)\n* Issue 4711 - SIGSEV with sync_repl (#4738)\n* Issue 4649 - fix testcase importing ContentSyncPlugin\n* Issue 2736 - Warnings from automatic shebang munging macro\n* Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736\n* Issue 4706 - negative wtime in access log for CMP operations\n\nBump version to 1.4.3.22:\n\n* Issue 4671 - UI - Fix browser crashes\n* lib389 - Add ContentSyncPlugin class\n* Issue 4656 - lib389 - fix cherry pick error\n* Issue 4229 - Fix Rust linking\n* Issue 4658 - monitor - connection start date is incorrect\n* Issue 2621 - lib389 - backport ds_supports_new_changelog()\n* Issue 4656 - Make replication CLI backwards compatible with role name change\n* Issue 4656 - Remove problematic language from UI/CLI/lib389\n* Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down\n* Issue 4663 - CLI - unable to add objectclass/attribute without x-origin\n\nBump version to 1.4.3.21:\n\n* Issue 4169 - UI - updates on the tuning page are not reflected in the UI\n* Issue 4588 - BUG - unable to compile without xcrypt (#4589)\n* Issue 4513 - Fix replication CI test failures (#4557)\n* Issue 4646 - CLI/UI - revise DNA plugin management\n* Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)\n* Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)\n* Issue 4615 - log message when psearch first exceeds max threads per conn\n\nBump version to 1.4.3.20:\n\n* Issue 4324 - Some architectures the cache line size file does not exist\n* Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)\n","status":"published","published":"2021-06-08T07:15:03Z","modified":"2026-02-04T02:36:00.801904Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"USN-5231-1","title":"389-ds-base vulnerabilities","description":"It was discovered that 389 Directory Server presented to users, during\nauthentication, an error message which could be used to discover if a\ncertain LDAP DN existed or not. A remote unauthenticated attacker could\npossibly use this to check the existence of an entry in a LDAP database\nand expose sensitive information. This issue affected only Ubuntu 20.04\nESM. (CVE-2020-35518)\n\nIt was discovered that 389 Directory Server was incorrectly validating\ndata used to access memory addresses. An authenticated attacker using a\nSyncrepl client could use this issue with a specially crafted query to\ncause 389 Directory Server to crash, resulting in a denial of service.\n(CVE-2021-3514)\n","status":"published","published":"2022-07-18T10:09:50Z","modified":"2026-06-25T13:30:56.127704724Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}