IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al

directory server güvenlik açıkları (CVE)

directory server için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

11.9 1513.2 812.4 411.7 311.8 312.8 113.1 1
18 sonuç
8.4Yüksek
CVE-2026-19843

389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8; Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell command string without proper escaping. An LDAP user with delegated privileges to create …

9.8Kritik
CVE-2026-18922

389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary property

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8; Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9

A flaw was found in 389 Directory Server. During SASL PLAIN authentication, a stale identity carried in a Cyrus SASL auxiliary property from a prior failed bind attempt can be installed on a connection following a subsequent, unrelated successful bind, regard…

7.5Yüksek
CVE-2026-18453

389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8; Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9

A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of op_shared_search allows an unauthenticated remote attacker to crash the LDAP server by sending a crafted sequence of search requests using the USE_ONE_BACK…

7.5Yüksek
CVE-2026-18355

389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet()

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8; Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9

A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), the wrapped-record length read from the wire is validated only against an upper bound. A small wire length (0, 1, or 2) produces an e…

7.5Yüksek
CVE-2026-76560

389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8; Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9

A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN against an empty stored attribute value, allowing an unauthenticated client to satisfy access control checks intended to …

6.5Orta
CVE-2026-78701

389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat Directory Server 13.2; Red Hat Red Hat Directory Server 11

A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication and Security Layer (SASL) UNBIND process. By sending a specially crafted request, the attacker can cause a connection to stall, leadin…

7.5Yüksek
CVE-2026-11770

389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8; Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9

A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication p…

7.5Yüksek
CVE-2026-15722

389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8; Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9

A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remo…

8.8Yüksek
CVE-2026-11610

389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbind

389ds 389-ds-base; Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8

A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). After a successful SASL bind with integrity protection (SSF > 0), an authenticated attacker can send a specially crafted oversized LDAP UNBIND packet that is co…

7.6Yüksek
CVE-2026-11774

389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8; Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9

An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), adding sizeof(uint32_t) to a crafted SASL packet length prefix of 0xFFFFFFFC causes unsigned wraparound to zero, bypassing the nsslapd-m…

5.9Orta
CVE-2026-11788

389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8; Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure.

7.5Yüksek
CVE-2026-9064

389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)

389-ds-base; Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8

A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function in the LDAP server does not enforce an upper bound on the number of controls per LDAP message. A remote, unauthenticated attacker can send a specially crafted LDAP request containing…

7.2Yüksek
CVE-2025-14905

389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8; Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9

A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the `schema_attr_enum_callback` function within the `schema.c` file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths…

1.3%EPSS
5.7Orta
CVE-2024-5953

389-ds-base: malformed userpassword hash may cause denial of service

389-ds-base; Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8

A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.

5.7Orta
CVE-2024-2199

389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c

389-ds-base; Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.8 for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8

A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.