PT-2021-7757 · Red Hat+6 · 389 Directory Server+7

Tbordaz · Published 2021-04-01 · Updated 2025-01-20 · CVE-2021-3514

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions 389 Directory Server versions (affected versions not specified)

Description The issue is related to a NULL pointer dereference error. An authenticated attacker can cause a crash by using a specially crafted query with a sync repl client in 389-ds-base. This allows a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2023-02649

CESA-2021_2595

CVE-2021-3514

DLA-3399-1

DLA-4021-1

OPENSUSE-SU-2021:0868-1

OPENSUSE-SU-2021_0868-1

RHSA-2021:2595

RHSA-2021:2796

RHSA-2021:3955

RHSA-2021_2595

RHSA-2022:0952

RLSA-2021:2595

SUSE-SU-2021:1878-1

SUSE-SU-2021_1878-1

USN-5231-1

Affected Products

389 Directory Server

Astra Linux

Centos

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

References · 37

• https://bdu.fstec.ru/vul/2023-02649 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-3514 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4021-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2021:2595 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-35518 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3399-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-2595.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-5231-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5231-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-0426SE17 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3514 · Security Note
• https://ubuntu.com/security/CVE-2021-3514 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-3514 · Security Note
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:0868-1 · Vendor Advisory