IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
8.4Alta

CVE-2026-19843389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8; R… Publicada: (hace 2 meses)

Descripción

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft a malicious DN containing shell metacharacters. When a Cockpit administrator subsequently views the entry in the 389 Console, the embedded shell command executes with root privileges on the directory server host.

Debilidad (CWE): CWE-78

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
directory server 11.9 —
directory server 12.8 —
directory server 13.2 —
directory server e2s 13.0 —
directory server e4s 11.5 —
directory server e4s 11.7 —
directory server e4s 12.2 —
directory server e4s 12.4 —
directory server eus 12.6 —
Red Hat Red Hat Directory Server 11 all versions
Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 all versions
Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8 all versions
Red Hat Red Hat Directory Server 11.9 for RHEL 8 all versions
Red Hat Red Hat Directory Server 12 all versions
Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9 all versions
Red Hat Red Hat Directory Server 12.4 E4S for RHEL 9 all versions
Red Hat Red Hat Directory Server 12.6 EUS for RHEL 9 all versions
Red Hat Red Hat Directory Server 12.8 for RHEL 9 all versions
Red Hat Red Hat Directory Server 13.0 EUS for RHEL 10 all versions
Red Hat Red Hat Directory Server 13.2 for RHEL 10 all versions
Red Hat Red Hat Enterprise Linux 10 all versions
Red Hat Red Hat Enterprise Linux 6 —
Red Hat Red Hat Enterprise Linux 7 —
Red Hat Red Hat Enterprise Linux 8 all versions
Red Hat Red Hat Enterprise Linux 9 all versions

Referencias y parches

CVE recientes del mismo producto — Red Hat Enterprise Linux

7.9Alta
CVE-2026-121876

Sandboxed-containers: kernel: systemd-gpt-auto-generator: guest data leakage in confidential computing (sandboxed containers)

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in the interaction between systemd-gpt-auto-generator and confidential computing guest VM images in OpenShift Sandboxed Containers (confidential peer pods). systemd-gpt-auto-generator automatically discovers and mounts GPT partitions by ty…

7.5Alta
CVE-2026-127030

Freeradius: stack buffer overflow via unchecked eap-fast sessionticket length

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in freeradius. An improper length validation in the EAP-FAST module allows a stack-based buffer overflow during session ticket processing. A remote, unauthenticated attacker can exploit this flaw by sending a specially crafted handshake reque…

7.5Alta
CVE-2026-127029

Freeradius: stack-based buffer overflow via unbounded eap-sim identity length

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in freeradius's Extensible Authentication Protocol Method for Subscriber Identity Module (EAP-SIM) module. When handling authentication requests, the server copies a client-supplied identity into an internal structure without properly checkin…

7.3Alta
CVE-2026-91151

Cockpit: cockpit: local privilege escalation via insecure symlink handling in public key addition helper

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.2 Extended Update Support; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9

A flaw was found in Cockpit. A local authenticated user with control over a target account's home directory can exploit a privileged symlink dereference vulnerability in the `ssh-add-public-key.sh` helper. When this helper runs with elevated privileges, it ca…

7.8Alta
CVE-2026-108472

Xfsprogs: xfsprogs: local privilege escalation via command injection in xfs_admin

Red Hat Red Hat Enterprise Linux 9.8 Extended Update Support; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in the xfs_admin utility in xfsprogs. The tool does not properly validate user-supplied parameters, allowing operating system command injection. A local attacker can exploit this issue by providing crafted input arguments, which may result in…