Vulnerabilidades de directory server eus (CVE)

8.4Alta

CVE-2026-19843 hace 2 meses

389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8; Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell command string without proper escaping. An LDAP user with delegated privileges to create …

7.2Alta

CVE-2025-14905 hace 8 meses

389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8; Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9

A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the `schema_attr_enum_callback` function within the `schema.c` file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths…

1.3%EPSS

4.9Media

CVE-2025-2487 hace 1 año

389-ds-base: null pointer dereference leads to denial of service

389-ds-base; Red Hat Red Hat Directory Server 12.4 EUS for RHEL 9; Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support

A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested and a NULL pointer is dereferenced. If a privileged user performs a ldap MODDN o…

5.7Media

CVE-2024-5953 hace 2 años

389-ds-base: malformed userpassword hash may cause denial of service

389-ds-base; Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8

A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.

7.5Alta

CVE-2024-3657 hace 2 años

389-ds-base: potential denial of service via specially crafted kerberos as-req request

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 for RHEL 8; Red Hat Red Hat Directory Server 11.8 for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8

A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service

1.3%EPSS

5.5Media

CVE-2024-1062 hace 2 años

389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)

389-ds-base; Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 for RHEL 8; Red Hat Red Hat Directory Server 11.8 for RHEL 8

A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.