PatchTheCVE389-ds-base vulnerabilities and fixes
Recent CVEs affecting 389-ds-base, with upgrade or downgrade steps. 4 tracked.
Also searched as: 389 ds base.
389-ds-base has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2022-10-14. Highest priority: CVE-2022-0918 (score 60/100).
- CVE-2022-2850 MEDIUM 6.5 DOWNGRADE MITIGATE A flaw was found In 389-ds-base
- CVE-2022-0918 HIGH 7.5 DOWNGRADE MITIGATE A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with networ
- CVE-2021-4091 HIGH 7.5 UPGRADE MITIGATE A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches
- CVE-2021-3652 MEDIUM 6.5 UPGRADE A flaw was found in 389-ds-base
FAQ
How do I fix 389-ds-base vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is 389-ds-base being exploited right now?
None of the tracked 389-ds-base CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which 389-ds-base CVE should I patch first?
CVE-2022-0918 currently ranks highest (60/100): A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with networ.