Total vulnerabilities in the database
A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix of CVE-2021-3514.
| Software | From | Fixed in |
|---|---|---|
| redhat / enterprise_linux | 7.0 | 7.0.x |
| redhat / enterprise_linux | 6.0 | 6.0.x |
| redhat / enterprise_linux | 8.0 | 8.0.x |
| redhat / directory_server | 11.0 | 11.0.x |
| redhat / enterprise_linux | 9.0 | 9.0.x |
| redhat / directory_server | 12.0 | 12.0.x |
| fedoraproject / fedora | 35 | 35.x |
| fedoraproject / fedora | 36 | 36.x |
| port389 / 389-ds-base | 2.0.0 | 2.4.1.x |
| debian / debian_linux | 10.0 | 10.0.x |