389-ds-base-libs vulnerabilities

Known vulnerabilities in the 389-ds-base-libs package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
H Improper Input Validation	<0:1.3.11.1-5.el7_9
H Improper Input Validation	<0:1.3.11.1-5.el7_9
M Heap-based Buffer Overflow	*
M NULL Pointer Dereference	<0:1.3.10.2-17.el7_9
M Incorrect Authorization	*
H Allocation of Resources Without Limits or Throttling	*
M Improper Authentication	<0:1.3.10.2-16.el7_9
M Resource Exhaustion	<0:1.3.10.2-16.el7_9
L Double Free	<0:1.3.10.2-15.el7_9
M Resource Exhaustion	<0:1.3.7.5-28.el7_5
H Heap-based Buffer Overflow	<0:1.3.7.5-21.el7_5
H Buffer Overflow	<0:1.3.6.1-26.el7_4
H Buffer Overflow	<0:1.3.6.1-28.el7_4
H Improper Authentication	<0:1.3.6.1-28.el7_4
H Out-of-Bounds	<0:1.3.5.10-20.el7_3
M Covert Timing Channel	<0:1.3.5.10-11.el7
M Information Exposure	<0:1.3.5.10-11.el7
M Information Exposure	<0:1.3.5.10-11.el7
H Missing Release of Resource after Effective Lifetime	<0:1.3.4.0-26.el7_2
H Insufficient Comparison	<0:1.3.3.1-16.el7_1
H Missing Authorization	<0:1.3.3.1-13.el7
H Insufficiently Protected Credentials	<0:1.3.3.1-13.el7
H Missing Authorization	<0:1.3.1.6-26.el7_0
M Information Exposure	<0:1.3.10.2-12.el7_9
M Improper Initialization	<0:1.3.3.1-20.el7_1
M NULL Pointer Dereference	*
H Incorrect Permission Assignment for Critical Resource	<0:1.3.9.1-12.el7_7
M Missing Release of Resource after Effective Lifetime	<0:1.3.8.4-25.1.el7_6
M Resource Exhaustion	<0:1.3.7.5-28.el7_5
M Improper Input Validation	<0:1.3.7.5-28.el7_5
M Resource Exhaustion	<0:1.3.8.4-15.el7
M Race Condition	<0:1.3.7.5-28.el7_5
M Cleartext Storage of Sensitive Information	*
M Information Exposure	<0:1.3.6.1-19.el7_4
L Heap-based Buffer Overflow	*
L Improper Authentication	<0:1.3.10.2-13.el7_9

Vulnerability

Vulnerable Version

Improper Input Validation

<0:1.3.11.1-5.el7_9

Improper Input Validation

<0:1.3.11.1-5.el7_9

Heap-based Buffer Overflow