Candidate: CVE-2021-4091 PublicDate: 2022-02-18 18:15:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4091 https://bugzilla.redhat.com/show_bug.cgi?id=2030307 Description: A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash. Ubuntu-Description: Notes: Mitigation: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H [7.5 HIGH] Patches_389-ds-base: upstream_389-ds-base: needs-triage trusty_389-ds-base: ignored (out of standard support) xenial_389-ds-base: ignored (out of standard support) bionic_389-ds-base: needs-triage focal_389-ds-base: needs-triage impish_389-ds-base: needs-triage jammy_389-ds-base: needs-triage devel_389-ds-base: needs-triage