Bug 1952804

Summary: CVE-2021-3514 389-ds:1.4/389-ds-base: sync_repl NULL pointer dereference in sync_create_state_control() [rhel-8]
Product: Red Hat Enterprise Linux 8 Reporter: thierry bordaz <tbordaz>
Component: 389-ds-baseAssignee: thierry bordaz <tbordaz>
Status: CLOSED ERRATA QA Contact: RHDS QE <ds-qe-bugs>
Severity: medium Docs Contact:
Priority: medium    
Version: 8.3CC: bsmejkal, john, ldap-maint, mreynolds, sgouvern
Target Milestone: betaKeywords: Security, SecurityTracking, Triaged, ZStream
Target Release: ---Flags: pm-rhel: mirror+
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: sync-to-jira
Fixed In Version: 389-ds-1.4-8050020210514191740-d5c171fc Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1960720 1960721 1960723 (view as bug list) Environment:
Last Closed: 2021-11-09 18:11:20 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1952907, 1960720, 1960721, 1960723    
Deadline: 2022-04-01   

Description thierry bordaz 2021-04-23 08:07:33 UTC 
Description of problem:
sync repl may crash when dealing with sync control

Version-Release number of selected component (if applicable):
RHEL 8

How reproducible:
TBD

Steps to Reproduce:
TBD

Actual results:
may crash

Expected results:
Should not crash
Comment 12 Viktor Ashirov 2021-06-17 17:15:49 UTC 
*** Bug 1973337 has been marked as a duplicate of this bug. ***
Comment 14 errata-xmlrpc 2021-11-09 18:11:20 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (389-ds-base bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:4203