389-ds-base-libs vulnerabilities

Known vulnerabilities in the 389-ds-base-libs package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L Double Free	<0:1.3.10.2-16.69.amzn1
L Improper Authentication	<0:1.3.10.2-9.67.amzn1
H Incorrect Permission Assignment for Critical Resource	<0:1.3.9.1-12.65.amzn1
H Cleartext Storage of Sensitive Information	<0:1.3.9.1-12.65.amzn1
H Information Exposure	<0:1.3.9.1-12.65.amzn1
H Missing Release of Resource after Effective Lifetime	<0:1.3.9.1-12.65.amzn1
M Missing Release of Resource after Effective Lifetime	<0:1.3.8.4-25.1.62.amzn1
M Resource Exhaustion	<0:1.3.8.4-18.60.amzn1
M Improper Input Validation	<0:1.3.7.5-28.58.amzn1
M Race Condition	<0:1.3.7.5-28.58.amzn1
M Improper Input Validation	<0:1.3.7.5-28.58.amzn1
M Double Free	<0:1.3.7.5-28.58.amzn1
H Out-of-Bounds	<0:1.3.7.5-21.56.amzn1
H Improper Authentication	<0:1.3.6.1-28.54.amzn1
H Out-of-bounds Read	<0:1.3.6.1-28.54.amzn1
H Out-of-Bounds	<0:1.3.6.1-26.52.amzn1
M Weak Password Recovery Mechanism for Forgotten Password	<0:1.3.6.1-19.51.amzn1
H NULL Pointer Dereference	<0:1.3.5.10-20.50.amzn1
M Information Management Errors	<0:1.3.5.10-11.49.amzn1
M Information Exposure	<0:1.3.5.10-11.49.amzn1
M Information Exposure	<0:1.3.5.10-11.49.amzn1
H Resource Management Errors	<0:1.3.4.0-26.47.amzn1
M Security Features	<0:1.3.3.1-16.42.amzn1
H Improper Access Control	<0:1.3.3.1-16.41.amzn1
H Information Exposure	<0:1.3.2.27-1.27.amzn1
H Information Exposure	<0:1.3.2.27-1.27.amzn1
H Information Exposure	<0:1.3.2.22-1.18.amzn1
H Improper Authentication	<0:1.3.2.16-1.16.amzn1
H Improper Input Validation	<0:1.3.1.16-1.8.amzn1
H Improper Input Validation	<0:1.3.1.8-1.5.amzn1
H Access Restriction Bypass	<0:1.3.1.8-1.5.amzn1
L Access Restriction Bypass	<0:1.3.0.6-1.3.amzn1

Vulnerability

Vulnerable Version

Double Free

<0:1.3.10.2-16.69.amzn1

Improper Authentication

<0:1.3.10.2-9.67.amzn1

Incorrect Permission Assignment for Critical Resource

<0:1.3.9.1-12.65.amzn1

Cleartext Storage of Sensitive Information

<0:1.3.9.1-12.65.amzn1

Information Exposure

<0:1.3.9.1-12.65.amzn1