SB2022062035 - SUSE update for 389-ds
Published: June 20, 2022
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 3 secuirty vulnerabilities.
1) Improper Authentication (CVE-ID: CVE-2021-3652)
The vulnerability allows a remote attacker to bypass authentication process.
The vulnerability exists due to an error in the way the asterisk character is processed by the LDAP server when importing password hashes from /etc/shadow for disabled accounts. As a result of the flaw, if an LDAP admin imports such an account from a NIS or /etc/shadow database into Directory Server, any password will be valid for that account.
2) Use-after-free (CVE-ID: CVE-2021-4091)
The vulnerability allows a remote user to perform a denial of service (DoS) attack.
The vulnerability exists due to a use-after-free error when processing virtual attributes context in persistent searches. A remote user can send specially crafted search requests to the directory server, trigger a use-after-free error and crash the server.
3) Incorrect authorization (CVE-ID: CVE-2022-1949)
The vulnerability allows a remote attacker to perform a denial of service attack.
The vulnerability exists due to incorrect authorization in the 389-ds-base package where some LDAP queries can cause performance issues. A remote attacker can send a non-optimal search that causes serious performance issues within the directory server.
Remediation
Install update from vendor's website.