CVE-2021-4091

State: Published
Severity: Not scored
Published: Feb 18, 2022
Updated: Nov 3, 2025
Reserved: Dec 10, 2021

Description

A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.

Scores

The record has no CVSS score.

Weaknesses

CWE-415

Affected Products

Product	Versions
389-ds-basen/a	389-ds-base-1.3.10.2Affected

References

https://bugzilla.redhat.com/show_bug.cgi?id=2030307
[debian-lts-announce] 20230424 [SECURITY] [DLA 3399-1] 389-ds-base security updatemailing-list
https://lists.debian.org/debian-lts-announce/2025/01/msg00015.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.