IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API

Vulnerabilidades de directory server e4s (CVE)

Registros CVE publicados para directory server e4s, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

11.5 1611.7 1212.2 1212.4 11
16 resultados
8.4Alta
CVE-2026-19843

389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8; Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell command string without proper escaping. An LDAP user with delegated privileges to create …

9.8Crítica
CVE-2026-18922

389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary property

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8; Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9

A flaw was found in 389 Directory Server. During SASL PLAIN authentication, a stale identity carried in a Cyrus SASL auxiliary property from a prior failed bind attempt can be installed on a connection following a subsequent, unrelated successful bind, regard…

7.5Alta
CVE-2026-18453

389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8; Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9

A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of op_shared_search allows an unauthenticated remote attacker to crash the LDAP server by sending a crafted sequence of search requests using the USE_ONE_BACK…

7.5Alta
CVE-2026-18355

389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet()

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8; Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9

A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), the wrapped-record length read from the wire is validated only against an upper bound. A small wire length (0, 1, or 2) produces an e…

7.5Alta
CVE-2026-76560

389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8; Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9

A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN against an empty stored attribute value, allowing an unauthenticated client to satisfy access control checks intended to …

7.5Alta
CVE-2026-11770

389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8; Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9

A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication p…

7.5Alta
CVE-2026-15722

389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8; Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9

A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remo…

8.8Alta
CVE-2026-11610

389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbind

389ds 389-ds-base; Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8

A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). After a successful SASL bind with integrity protection (SSF > 0), an authenticated attacker can send a specially crafted oversized LDAP UNBIND packet that is co…

7.6Alta
CVE-2026-11774

389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8; Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9

An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), adding sizeof(uint32_t) to a crafted SASL packet length prefix of 0xFFFFFFFC causes unsigned wraparound to zero, bypassing the nsslapd-m…

5.9Media
CVE-2026-11788

389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8; Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure.

7.5Alta
CVE-2026-9064

389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)

389-ds-base; Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8

A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function in the LDAP server does not enforce an upper bound on the number of controls per LDAP message. A remote, unauthenticated attacker can send a specially crafted LDAP request containing…

7.2Alta
CVE-2025-14905

389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8; Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9

A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the `schema_attr_enum_callback` function within the `schema.c` file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths…

1.3%EPSS
5.7Media
CVE-2024-5953

389-ds-base: malformed userpassword hash may cause denial of service

389-ds-base; Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8

A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.

5.7Media
CVE-2024-2199

389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c

389-ds-base; Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.8 for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8

A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.