CVE-2021-4091

HIGH

389-ds-base - Double Free in Virtual Attributes Context Handling

Title source: llm
STIX 2.1

Description

A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.

References (3)

Core 3

Scores

CVSS v3 7.5
EPSS 0.0034
EPSS Percentile 56.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-415
Status published
Products (8)
port389/389-ds-base < 1.3.10.2
redhat/enterprise_linux_desktop 7
redhat/enterprise_linux_for_ibm_z_systems 7.0
redhat/enterprise_linux_for_power_big_endian 7.0
redhat/enterprise_linux_for_power_little_endian 7.0
redhat/enterprise_linux_for_scientific_computing 7.0
redhat/enterprise_linux_server 7.0
redhat/enterprise_linux_workstation 7.0
Published Feb 18, 2022
Tracked Since Feb 18, 2026