{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_vex", "csaf_version": "2.0", "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "title": "sync_repl NULL pointer dereference in sync_create_state_control()", "tracking": { "current_release_date": "2026-08-11T14:55:28+00:00", "generator": { "date": "2026-08-11T14:55:28+00:00", "engine": { "name": "CSAF Generator", "version": "3.3.0" } }, "id": "CVE-2021-3514", "initial_release_date": "2021-04-01T00:00:00+00:00", "revision_history": [ { "date": "2026-08-11T14:55:28+00:00", "number": "1", "summary": "Last generated version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "category": "vendor", "name": "Red Hat", "branches": [ { "category": "product_name", "name": "Red Hat Directory Server 11.3", "product": { "name": "Red Hat Directory Server 11.3", "product_id": "directory_server_11.3::el8", "product_identification_helper": { "cpe": "cpe:/a:redhat:directory_server:11.3::el8" } } }, { "category": "product_name", "name": "Red Hat Directory Server dirsrv-11.4", "product": { "name": "Red Hat Directory Server dirsrv-11.4", "product_id": "directory_server_11.4::el8", "product_identification_helper": { "cpe": "cpe:/a:redhat:directory_server:11.4::el8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 6-els", "product": { "name": "Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 7-els", "product": { "name": "Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.10.z", "product": { "name": "Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.2.0.z", "product": { "name": "Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_aus:8.2" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.2.0.z", "product": { "name": "Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.eus::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.2::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.3", "product": { "name": "Red Hat Enterprise Linux 8.3", "product_id": "rhel-8.3.0.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.4.0.z", "product": { "name": "Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.4" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.4.0.z", "product": { "name": "Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.4::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.0", "product": { "name": "Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.2.0.z", "product": { "name": "Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-br-8.2.0.z.eus::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.2::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.4.0.z", "product": { "name": "Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-br-8.4.0.z::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } }, { "category": "product_version", "name": "389-ds-base", "product": { "name": "389-ds-base", "product_id": "389-ds-base", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base" } } }, { "category": "product_version", "name": "389-ds-base", "product": { "name": "389-ds-base", "product_id": "389-ds-base-0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base@1.4.2.4-14.module%2Bel8.2.0%2B11017%2B0eb5711a?arch=src&epoch=0" } } }, { "category": "product_version", "name": "389-ds-base", "product": { "name": "389-ds-base", "product_id": "389-ds-base-0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base@1.4.3.16-16.module%2Bel8.4.0%2B11446%2Bfc96bc48?arch=src&epoch=0" } } }, { "category": "product_version", "name": "389-ds-base", "product": { "name": "389-ds-base", "product_id": "389-ds-base-0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base@1.4.3.22-4.module%2Bel8dsrv%2B13893%2B84b6c18c?arch=src&epoch=0" } } }, { "category": "product_version", "name": "389-ds-base", "product": { "name": "389-ds-base", "product_id": "389-ds-base-0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base@1.4.3.27-2.module%2Bel8dsrv%2B12690%2Bc6df6d1b?arch=src&epoch=0" } } }, { "category": "product_version", "name": "389-ds-base-debuginfo", "product": { "name": "389-ds-base-debuginfo", "product_id": "389-ds-base-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-debuginfo" } } }, { "category": "product_version", "name": "389-ds-base-debugsource", "product": { "name": "389-ds-base-debugsource", "product_id": "389-ds-base-debugsource", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-debugsource" } } }, { "category": "product_version", "name": "389-ds-base-devel", "product": { "name": "389-ds-base-devel", "product_id": "389-ds-base-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-devel" } } }, { "category": "product_version", "name": "389-ds-base-legacy-tools", "product": { "name": "389-ds-base-legacy-tools", "product_id": "389-ds-base-legacy-tools", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-legacy-tools" } } }, { "category": "product_version", "name": "389-ds-base-legacy-tools-debuginfo", "product": { "name": "389-ds-base-legacy-tools-debuginfo", "product_id": "389-ds-base-legacy-tools-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo" } } }, { "category": "product_version", "name": "389-ds-base-libs", "product": { "name": "389-ds-base-libs", "product_id": "389-ds-base-libs", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-libs" } } }, { "category": "product_version", "name": "389-ds-base-libs-debuginfo", "product": { "name": "389-ds-base-libs-debuginfo", "product_id": "389-ds-base-libs-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo" } } }, { "category": "product_version", "name": "389-ds-base-snmp", "product": { "name": "389-ds-base-snmp", "product_id": "389-ds-base-snmp", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-snmp" } } }, { "category": "product_version", "name": "389-ds-base-snmp-debuginfo", "product": { "name": "389-ds-base-snmp-debuginfo", "product_id": "389-ds-base-snmp-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo" } } }, { "category": "product_version", "name": "389-ds-base", "product": { "name": "389-ds-base", "product_id": "389-ds-base.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base?arch=src" } } }, { "category": "product_version", "name": "389-ds:1.4:8040020210616143519:96015a92/389-ds", "product": { "name": "389-ds:1.4:8040020210616143519:96015a92/389-ds", "product_id": "389-ds:1.4:8040020210616143519:96015a92/389-ds", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds?rpmmod=389-ds:1.4:8040020210616143519:96015a92" } } }, { "category": "product_version", "name": "cockpit-389-ds", "product": { "name": "cockpit-389-ds", "product_id": "cockpit-389-ds", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit-389-ds" } } }, { "category": "product_version", "name": "python3-lib389", "product": { "name": "python3-lib389", "product_id": "python3-lib389", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-lib389" } } } ] } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "389-ds-base as a component of Red Hat Directory Server dirsrv-11.4", "product_id": "directory_server_11.4::el8:389-ds-base" }, "product_reference": "389-ds-base", "relates_to_product_reference": "directory_server_11.4::el8" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-br-8.4.0.z::appstream:389-ds-base" }, "product_reference": "389-ds-base", "relates_to_product_reference": "rhel-br-8.4.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base as a component of Red Hat Directory Server 11.3", "product_id": "directory_server_11.3::el8:389-ds-base" }, "product_reference": "389-ds-base", "relates_to_product_reference": "directory_server_11.3::el8" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.eus::appstream:389-ds-base" }, "product_reference": "389-ds-base", "relates_to_product_reference": "rhel-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus::appstream:389-ds-base" }, "product_reference": "389-ds-base", "relates_to_product_reference": "rhel-8.4.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:389-ds-base" }, "product_reference": "389-ds-base", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:389-ds-base" }, "product_reference": "389-ds-base", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:389-ds-base" }, "product_reference": "389-ds-base", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:389-ds-base" }, "product_reference": "389-ds-base", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-br-8.2.0.z.eus::appstream:389-ds-base" }, "product_reference": "389-ds-base", "relates_to_product_reference": "rhel-br-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a.src as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.eus::appstream:389-ds-base-0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a.src" }, "product_reference": "389-ds-base-0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a.src", "relates_to_product_reference": "rhel-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a.src as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-br-8.2.0.z.eus::appstream:389-ds-base-0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a.src" }, "product_reference": "389-ds-base-0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a.src", "relates_to_product_reference": "rhel-br-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48.src as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-br-8.4.0.z::appstream:389-ds-base-0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48.src" }, "product_reference": "389-ds-base-0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48.src", "relates_to_product_reference": "rhel-br-8.4.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48.src as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus::appstream:389-ds-base-0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48.src" }, "product_reference": "389-ds-base-0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48.src", "relates_to_product_reference": "rhel-8.4.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48.src as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:389-ds-base-0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48.src" }, "product_reference": "389-ds-base-0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48.src", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c.src as a component of Red Hat Directory Server 11.3", "product_id": "directory_server_11.3::el8:389-ds-base-0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c.src" }, "product_reference": "389-ds-base-0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c.src", "relates_to_product_reference": "directory_server_11.3::el8" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b.src as a component of Red Hat Directory Server dirsrv-11.4", "product_id": "directory_server_11.4::el8:389-ds-base-0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b.src" }, "product_reference": "389-ds-base-0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b.src", "relates_to_product_reference": "directory_server_11.4::el8" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:389-ds-base-debuginfo" }, "product_reference": "389-ds-base-debuginfo", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:389-ds-base-debuginfo" }, "product_reference": "389-ds-base-debuginfo", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus::appstream:389-ds-base-debuginfo" }, "product_reference": "389-ds-base-debuginfo", "relates_to_product_reference": "rhel-8.4.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:389-ds-base-debuginfo" }, "product_reference": "389-ds-base-debuginfo", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debugsource as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus::appstream:389-ds-base-debugsource" }, "product_reference": "389-ds-base-debugsource", "relates_to_product_reference": "rhel-8.4.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debugsource as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:389-ds-base-debugsource" }, "product_reference": "389-ds-base-debugsource", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:389-ds-base-devel" }, "product_reference": "389-ds-base-devel", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-br-8.4.0.z::appstream:389-ds-base-devel" }, "product_reference": "389-ds-base-devel", "relates_to_product_reference": "rhel-br-8.4.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel as a component of Red Hat Directory Server 11.3", "product_id": "directory_server_11.3::el8:389-ds-base-devel" }, "product_reference": "389-ds-base-devel", "relates_to_product_reference": "directory_server_11.3::el8" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.eus::appstream:389-ds-base-devel" }, "product_reference": "389-ds-base-devel", "relates_to_product_reference": "rhel-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:389-ds-base-devel" }, "product_reference": "389-ds-base-devel", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-br-8.2.0.z.eus::appstream:389-ds-base-devel" }, "product_reference": "389-ds-base-devel", "relates_to_product_reference": "rhel-br-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus::appstream:389-ds-base-devel" }, "product_reference": "389-ds-base-devel", "relates_to_product_reference": "rhel-8.4.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:389-ds-base-devel" }, "product_reference": "389-ds-base-devel", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:389-ds-base-devel" }, "product_reference": "389-ds-base-devel", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel as a component of Red Hat Directory Server dirsrv-11.4", "product_id": "directory_server_11.4::el8:389-ds-base-devel" }, "product_reference": "389-ds-base-devel", "relates_to_product_reference": "directory_server_11.4::el8" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-legacy-tools as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-br-8.2.0.z.eus::appstream:389-ds-base-legacy-tools" }, "product_reference": "389-ds-base-legacy-tools", "relates_to_product_reference": "rhel-br-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-legacy-tools as a component of Red Hat Directory Server 11.3", "product_id": "directory_server_11.3::el8:389-ds-base-legacy-tools" }, "product_reference": "389-ds-base-legacy-tools", "relates_to_product_reference": "directory_server_11.3::el8" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-legacy-tools as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:389-ds-base-legacy-tools" }, "product_reference": "389-ds-base-legacy-tools", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-legacy-tools as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus::appstream:389-ds-base-legacy-tools" }, "product_reference": "389-ds-base-legacy-tools", "relates_to_product_reference": "rhel-8.4.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-legacy-tools as a component of Red Hat Directory Server dirsrv-11.4", "product_id": "directory_server_11.4::el8:389-ds-base-legacy-tools" }, "product_reference": "389-ds-base-legacy-tools", "relates_to_product_reference": "directory_server_11.4::el8" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-legacy-tools as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.eus::appstream:389-ds-base-legacy-tools" }, "product_reference": "389-ds-base-legacy-tools", "relates_to_product_reference": "rhel-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-legacy-tools as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-br-8.4.0.z::appstream:389-ds-base-legacy-tools" }, "product_reference": "389-ds-base-legacy-tools", "relates_to_product_reference": "rhel-br-8.4.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-legacy-tools-debuginfo as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus::appstream:389-ds-base-legacy-tools-debuginfo" }, "product_reference": "389-ds-base-legacy-tools-debuginfo", "relates_to_product_reference": "rhel-8.4.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-legacy-tools-debuginfo as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:389-ds-base-legacy-tools-debuginfo" }, "product_reference": "389-ds-base-legacy-tools-debuginfo", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-br-8.2.0.z.eus::appstream:389-ds-base-libs" }, "product_reference": "389-ds-base-libs", "relates_to_product_reference": "rhel-br-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus::appstream:389-ds-base-libs" }, "product_reference": "389-ds-base-libs", "relates_to_product_reference": "rhel-8.4.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs as a component of Red Hat Directory Server dirsrv-11.4", "product_id": "directory_server_11.4::el8:389-ds-base-libs" }, "product_reference": "389-ds-base-libs", "relates_to_product_reference": "directory_server_11.4::el8" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:389-ds-base-libs" }, "product_reference": "389-ds-base-libs", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:389-ds-base-libs" }, "product_reference": "389-ds-base-libs", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:389-ds-base-libs" }, "product_reference": "389-ds-base-libs", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-br-8.4.0.z::appstream:389-ds-base-libs" }, "product_reference": "389-ds-base-libs", "relates_to_product_reference": "rhel-br-8.4.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.eus::appstream:389-ds-base-libs" }, "product_reference": "389-ds-base-libs", "relates_to_product_reference": "rhel-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:389-ds-base-libs" }, "product_reference": "389-ds-base-libs", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs as a component of Red Hat Directory Server 11.3", "product_id": "directory_server_11.3::el8:389-ds-base-libs" }, "product_reference": "389-ds-base-libs", "relates_to_product_reference": "directory_server_11.3::el8" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-debuginfo as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus::appstream:389-ds-base-libs-debuginfo" }, "product_reference": "389-ds-base-libs-debuginfo", "relates_to_product_reference": "rhel-8.4.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-debuginfo as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:389-ds-base-libs-debuginfo" }, "product_reference": "389-ds-base-libs-debuginfo", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus::appstream:389-ds-base-snmp" }, "product_reference": "389-ds-base-snmp", "relates_to_product_reference": "rhel-8.4.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:389-ds-base-snmp" }, "product_reference": "389-ds-base-snmp", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp as a component of Red Hat Directory Server 11.3", "product_id": "directory_server_11.3::el8:389-ds-base-snmp" }, "product_reference": "389-ds-base-snmp", "relates_to_product_reference": "directory_server_11.3::el8" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-br-8.4.0.z::appstream:389-ds-base-snmp" }, "product_reference": "389-ds-base-snmp", "relates_to_product_reference": "rhel-br-8.4.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.eus::appstream:389-ds-base-snmp" }, "product_reference": "389-ds-base-snmp", "relates_to_product_reference": "rhel-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:389-ds-base-snmp" }, "product_reference": "389-ds-base-snmp", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp as a component of Red Hat Directory Server dirsrv-11.4", "product_id": "directory_server_11.4::el8:389-ds-base-snmp" }, "product_reference": "389-ds-base-snmp", "relates_to_product_reference": "directory_server_11.4::el8" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:389-ds-base-snmp" }, "product_reference": "389-ds-base-snmp", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-br-8.2.0.z.eus::appstream:389-ds-base-snmp" }, "product_reference": "389-ds-base-snmp", "relates_to_product_reference": "rhel-br-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp-debuginfo as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus::appstream:389-ds-base-snmp-debuginfo" }, "product_reference": "389-ds-base-snmp-debuginfo", "relates_to_product_reference": "rhel-8.4.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp-debuginfo as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:389-ds-base-snmp-debuginfo" }, "product_reference": "389-ds-base-snmp-debuginfo", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base.src as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:389-ds-base.src" }, "product_reference": "389-ds-base.src", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base.src as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:389-ds-base.src" }, "product_reference": "389-ds-base.src", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base.src as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:389-ds-base.src" }, "product_reference": "389-ds-base.src", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds:1.4:8040020210616143519:96015a92/389-ds as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:389-ds:1.4:8040020210616143519:96015a92/389-ds" }, "product_reference": "389-ds:1.4:8040020210616143519:96015a92/389-ds", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds:1.4:8040020210616143519:96015a92/389-ds as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:389-ds:1.4:8040020210616143519:96015a92/389-ds" }, "product_reference": "389-ds:1.4:8040020210616143519:96015a92/389-ds", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds:1.4:8040020210616143519:96015a92/389-ds as a component of Red Hat Enterprise Linux 8.3", "product_id": "rhel-8.3.0.z:389-ds:1.4:8040020210616143519:96015a92/389-ds" }, "product_reference": "389-ds:1.4:8040020210616143519:96015a92/389-ds", "relates_to_product_reference": "rhel-8.3.0.z" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-389-ds as a component of Red Hat Directory Server dirsrv-11.4", "product_id": "directory_server_11.4::el8:cockpit-389-ds" }, "product_reference": "cockpit-389-ds", "relates_to_product_reference": "directory_server_11.4::el8" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-389-ds as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:cockpit-389-ds" }, "product_reference": "cockpit-389-ds", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-389-ds as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus::appstream:cockpit-389-ds" }, "product_reference": "cockpit-389-ds", "relates_to_product_reference": "rhel-8.4.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-389-ds as a component of Red Hat Directory Server 11.3", "product_id": "directory_server_11.3::el8:cockpit-389-ds" }, "product_reference": "cockpit-389-ds", "relates_to_product_reference": "directory_server_11.3::el8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-lib389 as a component of Red Hat Directory Server dirsrv-11.4", "product_id": "directory_server_11.4::el8:python3-lib389" }, "product_reference": "python3-lib389", "relates_to_product_reference": "directory_server_11.4::el8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-lib389 as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.eus::appstream:python3-lib389" }, "product_reference": "python3-lib389", "relates_to_product_reference": "rhel-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "python3-lib389 as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus::appstream:python3-lib389" }, "product_reference": "python3-lib389", "relates_to_product_reference": "rhel-8.4.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "python3-lib389 as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:python3-lib389" }, "product_reference": "python3-lib389", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "python3-lib389 as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:python3-lib389" }, "product_reference": "python3-lib389", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "python3-lib389 as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-br-8.2.0.z.eus::appstream:python3-lib389" }, "product_reference": "python3-lib389", "relates_to_product_reference": "rhel-br-8.2.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "python3-lib389 as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-br-8.4.0.z::appstream:python3-lib389" }, "product_reference": "python3-lib389", "relates_to_product_reference": "rhel-br-8.4.0.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "python3-lib389 as a component of Red Hat Directory Server 11.3", "product_id": "directory_server_11.3::el8:python3-lib389" }, "product_reference": "python3-lib389", "relates_to_product_reference": "directory_server_11.3::el8" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-3514", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2021-04-23T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "directory_server_11.3::el8:389-ds-base-devel", "directory_server_11.4::el8:389-ds-base-devel", "rhel-6-els.els:389-ds-base-debuginfo", "rhel-6-els.els:389-ds-base-devel", "rhel-7-els.els:389-ds-base-debuginfo", "rhel-7-els.els:389-ds-base-devel", "rhel-8.10.z::appstream:389-ds-base-debuginfo", "rhel-8.10.z::appstream:389-ds-base-debugsource", "rhel-8.10.z::appstream:389-ds-base-devel", "rhel-8.10.z::appstream:389-ds-base-legacy-tools-debuginfo", "rhel-8.10.z::appstream:389-ds-base-libs-debuginfo", "rhel-8.10.z::appstream:389-ds-base-snmp-debuginfo", "rhel-8.2.0.z.eus::appstream:389-ds-base-devel", "rhel-8.4.0.z.eus::appstream:389-ds-base-debuginfo", "rhel-8.4.0.z.eus::appstream:389-ds-base-debugsource", "rhel-8.4.0.z.eus::appstream:389-ds-base-devel", "rhel-8.4.0.z.eus::appstream:389-ds-base-legacy-tools-debuginfo", "rhel-8.4.0.z.eus::appstream:389-ds-base-libs-debuginfo", "rhel-8.4.0.z.eus::appstream:389-ds-base-snmp-debuginfo", "rhel-9.0:389-ds-base", "rhel-9.0:389-ds-base-devel", "rhel-9.0:389-ds-base-libs", "rhel-9.0:389-ds-base-snmp", "rhel-9.0:python3-lib389", "rhel-br-8.2.0.z.eus::appstream:389-ds-base-devel", "rhel-br-8.4.0.z::appstream:389-ds-base-devel" ] } ], "notes": [ { "category": "other", "text": "Red Hat Identity Management is affected by this flaw, as Content Synchronization is enabled by default.", "title": "Statement" }, { "category": "description", "text": "A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "directory_server_11.3::el8:389-ds-base", "directory_server_11.3::el8:389-ds-base-0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c.src", "directory_server_11.3::el8:389-ds-base-legacy-tools", "directory_server_11.3::el8:389-ds-base-libs", "directory_server_11.3::el8:389-ds-base-snmp", "directory_server_11.3::el8:cockpit-389-ds", "directory_server_11.3::el8:python3-lib389", "directory_server_11.4::el8:389-ds-base", "directory_server_11.4::el8:389-ds-base-0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b.src", "directory_server_11.4::el8:389-ds-base-legacy-tools", "directory_server_11.4::el8:389-ds-base-libs", "directory_server_11.4::el8:389-ds-base-snmp", "directory_server_11.4::el8:cockpit-389-ds", "directory_server_11.4::el8:python3-lib389", "rhel-8.10.z::appstream:389-ds-base", "rhel-8.10.z::appstream:389-ds-base-0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48.src", "rhel-8.10.z::appstream:389-ds-base-legacy-tools", "rhel-8.10.z::appstream:389-ds-base-libs", "rhel-8.10.z::appstream:389-ds-base-snmp", "rhel-8.10.z::appstream:cockpit-389-ds", "rhel-8.10.z::appstream:python3-lib389", "rhel-8.2.0.z.eus::appstream:389-ds-base", "rhel-8.2.0.z.eus::appstream:389-ds-base-0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a.src", "rhel-8.2.0.z.eus::appstream:389-ds-base-legacy-tools", "rhel-8.2.0.z.eus::appstream:389-ds-base-libs", "rhel-8.2.0.z.eus::appstream:389-ds-base-snmp", "rhel-8.2.0.z.eus::appstream:python3-lib389", "rhel-8.4.0.z.eus::appstream:389-ds-base", "rhel-8.4.0.z.eus::appstream:389-ds-base-0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48.src", "rhel-8.4.0.z.eus::appstream:389-ds-base-legacy-tools", "rhel-8.4.0.z.eus::appstream:389-ds-base-libs", "rhel-8.4.0.z.eus::appstream:389-ds-base-snmp", "rhel-8.4.0.z.eus::appstream:cockpit-389-ds", "rhel-8.4.0.z.eus::appstream:python3-lib389", "rhel-br-8.2.0.z.eus::appstream:389-ds-base", "rhel-br-8.2.0.z.eus::appstream:389-ds-base-0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a.src", "rhel-br-8.2.0.z.eus::appstream:389-ds-base-legacy-tools", "rhel-br-8.2.0.z.eus::appstream:389-ds-base-libs", "rhel-br-8.2.0.z.eus::appstream:389-ds-base-snmp", "rhel-br-8.2.0.z.eus::appstream:python3-lib389", "rhel-br-8.4.0.z::appstream:389-ds-base", "rhel-br-8.4.0.z::appstream:389-ds-base-0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48.src", "rhel-br-8.4.0.z::appstream:389-ds-base-legacy-tools", "rhel-br-8.4.0.z::appstream:389-ds-base-libs", "rhel-br-8.4.0.z::appstream:389-ds-base-snmp", "rhel-br-8.4.0.z::appstream:python3-lib389" ], "known_affected": [ "rhel-6-els.els:389-ds-base", "rhel-6-els.els:389-ds-base-libs", "rhel-6-els.els:389-ds-base.src", "rhel-7-els.els:389-ds-base", "rhel-7-els.els:389-ds-base-libs", "rhel-7-els.els:389-ds-base-snmp", "rhel-7-els.els:389-ds-base.src", "rhel-8.2.0.z.aus:389-ds:1.4:8040020210616143519:96015a92/389-ds", "rhel-8.3.0.z:389-ds:1.4:8040020210616143519:96015a92/389-ds", "rhel-8.4.0.z.eus:389-ds:1.4:8040020210616143519:96015a92/389-ds", "rhel-9.0:389-ds-base.src" ], "known_not_affected": [ "directory_server_11.3::el8:389-ds-base-devel", "directory_server_11.4::el8:389-ds-base-devel", "rhel-6-els.els:389-ds-base-debuginfo", "rhel-6-els.els:389-ds-base-devel", "rhel-7-els.els:389-ds-base-debuginfo", "rhel-7-els.els:389-ds-base-devel", "rhel-8.10.z::appstream:389-ds-base-debuginfo", "rhel-8.10.z::appstream:389-ds-base-debugsource", "rhel-8.10.z::appstream:389-ds-base-devel", "rhel-8.10.z::appstream:389-ds-base-legacy-tools-debuginfo", "rhel-8.10.z::appstream:389-ds-base-libs-debuginfo", "rhel-8.10.z::appstream:389-ds-base-snmp-debuginfo", "rhel-8.2.0.z.eus::appstream:389-ds-base-devel", "rhel-8.4.0.z.eus::appstream:389-ds-base-debuginfo", "rhel-8.4.0.z.eus::appstream:389-ds-base-debugsource", "rhel-8.4.0.z.eus::appstream:389-ds-base-devel", "rhel-8.4.0.z.eus::appstream:389-ds-base-legacy-tools-debuginfo", "rhel-8.4.0.z.eus::appstream:389-ds-base-libs-debuginfo", "rhel-8.4.0.z.eus::appstream:389-ds-base-snmp-debuginfo", "rhel-9.0:389-ds-base", "rhel-9.0:389-ds-base-devel", "rhel-9.0:389-ds-base-libs", "rhel-9.0:389-ds-base-snmp", "rhel-9.0:python3-lib389", "rhel-br-8.2.0.z.eus::appstream:389-ds-base-devel", "rhel-br-8.4.0.z::appstream:389-ds-base-devel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-3514" }, { "category": "external", "summary": "nvd.nist.gov", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3514" }, { "category": "external", "summary": "www.cve.org", "url": "https://www.cve.org/CVERecord?id=CVE-2021-3514" } ], "remediations": [ { "category": "no_fix_planned", "details": "Out of support scope", "product_ids": [ "rhel-6-els.els:389-ds-base", "rhel-6-els.els:389-ds-base-libs", "rhel-6-els.els:389-ds-base.src", "rhel-7-els.els:389-ds-base", "rhel-7-els.els:389-ds-base-libs", "rhel-7-els.els:389-ds-base-snmp", "rhel-7-els.els:389-ds-base.src" ] }, { "category": "no_fix_planned", "details": "Will not fix", "product_ids": [ "rhel-8.3.0.z:389-ds:1.4:8040020210616143519:96015a92/389-ds" ] }, { "category": "none_available", "details": "Affected", "product_ids": [ "rhel-8.2.0.z.aus:389-ds:1.4:8040020210616143519:96015a92/389-ds", "rhel-8.4.0.z.eus:389-ds:1.4:8040020210616143519:96015a92/389-ds", "rhel-9.0:389-ds-base.src" ] }, { "category": "vendor_fix", "date": "2021-07-21T00:04:29+00:00", "details": "Apply advisory RHSA-2021:2796 as per vendors instructions.", "product_ids": [ "rhel-8.2.0.z.eus::appstream:389-ds-base", "rhel-8.2.0.z.eus::appstream:389-ds-base-0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a.src", "rhel-8.2.0.z.eus::appstream:389-ds-base-legacy-tools", "rhel-8.2.0.z.eus::appstream:389-ds-base-libs", "rhel-8.2.0.z.eus::appstream:389-ds-base-snmp", "rhel-8.2.0.z.eus::appstream:python3-lib389", "rhel-br-8.2.0.z.eus::appstream:389-ds-base", "rhel-br-8.2.0.z.eus::appstream:389-ds-base-0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a.src", "rhel-br-8.2.0.z.eus::appstream:389-ds-base-legacy-tools", "rhel-br-8.2.0.z.eus::appstream:389-ds-base-libs", "rhel-br-8.2.0.z.eus::appstream:389-ds-base-snmp", "rhel-br-8.2.0.z.eus::appstream:python3-lib389" ], "url": "https://access.redhat.com/errata/RHSA-2021:2796" }, { "category": "vendor_fix", "date": "2021-06-29T20:42:49+00:00", "details": "Apply advisory RHSA-2021:2595 as per vendors instructions.", "product_ids": [ "rhel-8.10.z::appstream:389-ds-base", "rhel-8.10.z::appstream:389-ds-base-0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48.src", "rhel-8.10.z::appstream:389-ds-base-legacy-tools", "rhel-8.10.z::appstream:389-ds-base-libs", "rhel-8.10.z::appstream:389-ds-base-snmp", "rhel-8.10.z::appstream:cockpit-389-ds", "rhel-8.10.z::appstream:python3-lib389", "rhel-8.4.0.z.eus::appstream:389-ds-base", "rhel-8.4.0.z.eus::appstream:389-ds-base-0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48.src", "rhel-8.4.0.z.eus::appstream:389-ds-base-legacy-tools", "rhel-8.4.0.z.eus::appstream:389-ds-base-libs", "rhel-8.4.0.z.eus::appstream:389-ds-base-snmp", "rhel-8.4.0.z.eus::appstream:cockpit-389-ds", "rhel-8.4.0.z.eus::appstream:python3-lib389", "rhel-br-8.4.0.z::appstream:389-ds-base", "rhel-br-8.4.0.z::appstream:389-ds-base-0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48.src", "rhel-br-8.4.0.z::appstream:389-ds-base-legacy-tools", "rhel-br-8.4.0.z::appstream:389-ds-base-libs", "rhel-br-8.4.0.z::appstream:389-ds-base-snmp", "rhel-br-8.4.0.z::appstream:python3-lib389" ], "url": "https://access.redhat.com/errata/RHSA-2021:2595" }, { "category": "vendor_fix", "date": "2021-10-25T06:38:28+00:00", "details": "Apply advisory RHSA-2021:3955 as per vendors instructions.", "product_ids": [ "directory_server_11.4::el8:389-ds-base", "directory_server_11.4::el8:389-ds-base-0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b.src", "directory_server_11.4::el8:389-ds-base-legacy-tools", "directory_server_11.4::el8:389-ds-base-libs", "directory_server_11.4::el8:389-ds-base-snmp", "directory_server_11.4::el8:cockpit-389-ds", "directory_server_11.4::el8:python3-lib389" ], "url": "https://access.redhat.com/errata/RHSA-2021:3955" }, { "category": "vendor_fix", "date": "2022-03-16T15:22:04+00:00", "details": "Apply advisory RHSA-2022:0952 as per vendors instructions.", "product_ids": [ "directory_server_11.3::el8:389-ds-base", "directory_server_11.3::el8:389-ds-base-0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c.src", "directory_server_11.3::el8:389-ds-base-legacy-tools", "directory_server_11.3::el8:389-ds-base-libs", "directory_server_11.3::el8:389-ds-base-snmp", "directory_server_11.3::el8:cockpit-389-ds", "directory_server_11.3::el8:python3-lib389" ], "url": "https://access.redhat.com/errata/RHSA-2022:0952" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "directory_server_11.3::el8:389-ds-base", "directory_server_11.3::el8:389-ds-base-0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c.src", "directory_server_11.3::el8:389-ds-base-devel", "directory_server_11.3::el8:389-ds-base-legacy-tools", "directory_server_11.3::el8:389-ds-base-libs", "directory_server_11.3::el8:389-ds-base-snmp", "directory_server_11.3::el8:cockpit-389-ds", "directory_server_11.3::el8:python3-lib389", "directory_server_11.4::el8:389-ds-base", "directory_server_11.4::el8:389-ds-base-0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b.src", "directory_server_11.4::el8:389-ds-base-devel", "directory_server_11.4::el8:389-ds-base-legacy-tools", "directory_server_11.4::el8:389-ds-base-libs", "directory_server_11.4::el8:389-ds-base-snmp", "directory_server_11.4::el8:cockpit-389-ds", "directory_server_11.4::el8:python3-lib389", "rhel-6-els.els:389-ds-base", "rhel-6-els.els:389-ds-base-debuginfo", "rhel-6-els.els:389-ds-base-devel", "rhel-6-els.els:389-ds-base-libs", "rhel-6-els.els:389-ds-base.src", "rhel-7-els.els:389-ds-base", "rhel-7-els.els:389-ds-base-debuginfo", "rhel-7-els.els:389-ds-base-devel", "rhel-7-els.els:389-ds-base-libs", "rhel-7-els.els:389-ds-base-snmp", "rhel-7-els.els:389-ds-base.src", "rhel-8.10.z::appstream:389-ds-base", "rhel-8.10.z::appstream:389-ds-base-0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48.src", "rhel-8.10.z::appstream:389-ds-base-debuginfo", "rhel-8.10.z::appstream:389-ds-base-debugsource", "rhel-8.10.z::appstream:389-ds-base-devel", "rhel-8.10.z::appstream:389-ds-base-legacy-tools", "rhel-8.10.z::appstream:389-ds-base-legacy-tools-debuginfo", "rhel-8.10.z::appstream:389-ds-base-libs", "rhel-8.10.z::appstream:389-ds-base-libs-debuginfo", "rhel-8.10.z::appstream:389-ds-base-snmp", "rhel-8.10.z::appstream:389-ds-base-snmp-debuginfo", "rhel-8.10.z::appstream:cockpit-389-ds", "rhel-8.10.z::appstream:python3-lib389", "rhel-8.2.0.z.aus:389-ds:1.4:8040020210616143519:96015a92/389-ds", "rhel-8.2.0.z.eus::appstream:389-ds-base", "rhel-8.2.0.z.eus::appstream:389-ds-base-0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a.src", "rhel-8.2.0.z.eus::appstream:389-ds-base-devel", "rhel-8.2.0.z.eus::appstream:389-ds-base-legacy-tools", "rhel-8.2.0.z.eus::appstream:389-ds-base-libs", "rhel-8.2.0.z.eus::appstream:389-ds-base-snmp", "rhel-8.2.0.z.eus::appstream:python3-lib389", "rhel-8.3.0.z:389-ds:1.4:8040020210616143519:96015a92/389-ds", "rhel-8.4.0.z.eus:389-ds:1.4:8040020210616143519:96015a92/389-ds", "rhel-8.4.0.z.eus::appstream:389-ds-base", "rhel-8.4.0.z.eus::appstream:389-ds-base-0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48.src", "rhel-8.4.0.z.eus::appstream:389-ds-base-debuginfo", "rhel-8.4.0.z.eus::appstream:389-ds-base-debugsource", "rhel-8.4.0.z.eus::appstream:389-ds-base-devel", "rhel-8.4.0.z.eus::appstream:389-ds-base-legacy-tools", "rhel-8.4.0.z.eus::appstream:389-ds-base-legacy-tools-debuginfo", "rhel-8.4.0.z.eus::appstream:389-ds-base-libs", "rhel-8.4.0.z.eus::appstream:389-ds-base-libs-debuginfo", "rhel-8.4.0.z.eus::appstream:389-ds-base-snmp", "rhel-8.4.0.z.eus::appstream:389-ds-base-snmp-debuginfo", "rhel-8.4.0.z.eus::appstream:cockpit-389-ds", "rhel-8.4.0.z.eus::appstream:python3-lib389", "rhel-9.0:389-ds-base", "rhel-9.0:389-ds-base-devel", "rhel-9.0:389-ds-base-libs", "rhel-9.0:389-ds-base-snmp", "rhel-9.0:389-ds-base.src", "rhel-9.0:python3-lib389", "rhel-br-8.2.0.z.eus::appstream:389-ds-base", "rhel-br-8.2.0.z.eus::appstream:389-ds-base-0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a.src", "rhel-br-8.2.0.z.eus::appstream:389-ds-base-devel", "rhel-br-8.2.0.z.eus::appstream:389-ds-base-legacy-tools", "rhel-br-8.2.0.z.eus::appstream:389-ds-base-libs", "rhel-br-8.2.0.z.eus::appstream:389-ds-base-snmp", "rhel-br-8.2.0.z.eus::appstream:python3-lib389", "rhel-br-8.4.0.z::appstream:389-ds-base", "rhel-br-8.4.0.z::appstream:389-ds-base-0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48.src", "rhel-br-8.4.0.z::appstream:389-ds-base-devel", "rhel-br-8.4.0.z::appstream:389-ds-base-legacy-tools", "rhel-br-8.4.0.z::appstream:389-ds-base-libs", "rhel-br-8.4.0.z::appstream:389-ds-base-snmp", "rhel-br-8.4.0.z::appstream:python3-lib389" ] } ], "threats": [ { "category": "impact", "details": "Moderate", "product_ids": [ "directory_server_11.3::el8:389-ds-base", "directory_server_11.3::el8:389-ds-base-0:1.4.3.22-4.module+el8dsrv+13893+84b6c18c.src", "directory_server_11.3::el8:389-ds-base-devel", "directory_server_11.3::el8:389-ds-base-legacy-tools", "directory_server_11.3::el8:389-ds-base-libs", "directory_server_11.3::el8:389-ds-base-snmp", "directory_server_11.3::el8:cockpit-389-ds", "directory_server_11.3::el8:python3-lib389", "directory_server_11.4::el8:389-ds-base", "directory_server_11.4::el8:389-ds-base-0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b.src", "directory_server_11.4::el8:389-ds-base-devel", "directory_server_11.4::el8:389-ds-base-legacy-tools", "directory_server_11.4::el8:389-ds-base-libs", "directory_server_11.4::el8:389-ds-base-snmp", "directory_server_11.4::el8:cockpit-389-ds", "directory_server_11.4::el8:python3-lib389", "rhel-6-els.els:389-ds-base", "rhel-6-els.els:389-ds-base-debuginfo", "rhel-6-els.els:389-ds-base-devel", "rhel-6-els.els:389-ds-base-libs", "rhel-6-els.els:389-ds-base.src", "rhel-7-els.els:389-ds-base", "rhel-7-els.els:389-ds-base-debuginfo", "rhel-7-els.els:389-ds-base-devel", "rhel-7-els.els:389-ds-base-libs", "rhel-7-els.els:389-ds-base-snmp", "rhel-7-els.els:389-ds-base.src", "rhel-8.10.z::appstream:389-ds-base", "rhel-8.10.z::appstream:389-ds-base-0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48.src", "rhel-8.10.z::appstream:389-ds-base-debuginfo", "rhel-8.10.z::appstream:389-ds-base-debugsource", "rhel-8.10.z::appstream:389-ds-base-devel", "rhel-8.10.z::appstream:389-ds-base-legacy-tools", "rhel-8.10.z::appstream:389-ds-base-legacy-tools-debuginfo", "rhel-8.10.z::appstream:389-ds-base-libs", "rhel-8.10.z::appstream:389-ds-base-libs-debuginfo", "rhel-8.10.z::appstream:389-ds-base-snmp", "rhel-8.10.z::appstream:389-ds-base-snmp-debuginfo", "rhel-8.10.z::appstream:cockpit-389-ds", "rhel-8.10.z::appstream:python3-lib389", "rhel-8.2.0.z.aus:389-ds:1.4:8040020210616143519:96015a92/389-ds", "rhel-8.2.0.z.eus::appstream:389-ds-base", "rhel-8.2.0.z.eus::appstream:389-ds-base-0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a.src", "rhel-8.2.0.z.eus::appstream:389-ds-base-devel", "rhel-8.2.0.z.eus::appstream:389-ds-base-legacy-tools", "rhel-8.2.0.z.eus::appstream:389-ds-base-libs", "rhel-8.2.0.z.eus::appstream:389-ds-base-snmp", "rhel-8.2.0.z.eus::appstream:python3-lib389", "rhel-8.3.0.z:389-ds:1.4:8040020210616143519:96015a92/389-ds", "rhel-8.4.0.z.eus:389-ds:1.4:8040020210616143519:96015a92/389-ds", "rhel-8.4.0.z.eus::appstream:389-ds-base", "rhel-8.4.0.z.eus::appstream:389-ds-base-0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48.src", "rhel-8.4.0.z.eus::appstream:389-ds-base-debuginfo", "rhel-8.4.0.z.eus::appstream:389-ds-base-debugsource", "rhel-8.4.0.z.eus::appstream:389-ds-base-devel", "rhel-8.4.0.z.eus::appstream:389-ds-base-legacy-tools", "rhel-8.4.0.z.eus::appstream:389-ds-base-legacy-tools-debuginfo", "rhel-8.4.0.z.eus::appstream:389-ds-base-libs", "rhel-8.4.0.z.eus::appstream:389-ds-base-libs-debuginfo", "rhel-8.4.0.z.eus::appstream:389-ds-base-snmp", "rhel-8.4.0.z.eus::appstream:389-ds-base-snmp-debuginfo", "rhel-8.4.0.z.eus::appstream:cockpit-389-ds", "rhel-8.4.0.z.eus::appstream:python3-lib389", "rhel-9.0:389-ds-base", "rhel-9.0:389-ds-base-devel", "rhel-9.0:389-ds-base-libs", "rhel-9.0:389-ds-base-snmp", "rhel-9.0:389-ds-base.src", "rhel-9.0:python3-lib389", "rhel-br-8.2.0.z.eus::appstream:389-ds-base", "rhel-br-8.2.0.z.eus::appstream:389-ds-base-0:1.4.2.4-14.module+el8.2.0+11017+0eb5711a.src", "rhel-br-8.2.0.z.eus::appstream:389-ds-base-devel", "rhel-br-8.2.0.z.eus::appstream:389-ds-base-legacy-tools", "rhel-br-8.2.0.z.eus::appstream:389-ds-base-libs", "rhel-br-8.2.0.z.eus::appstream:389-ds-base-snmp", "rhel-br-8.2.0.z.eus::appstream:python3-lib389", "rhel-br-8.4.0.z::appstream:389-ds-base", "rhel-br-8.4.0.z::appstream:389-ds-base-0:1.4.3.16-16.module+el8.4.0+11446+fc96bc48.src", "rhel-br-8.4.0.z::appstream:389-ds-base-devel", "rhel-br-8.4.0.z::appstream:389-ds-base-legacy-tools", "rhel-br-8.4.0.z::appstream:389-ds-base-libs", "rhel-br-8.4.0.z::appstream:389-ds-base-snmp", "rhel-br-8.4.0.z::appstream:python3-lib389" ] } ], "title": "sync_repl NULL pointer dereference in sync_create_state_control()" } ] }