Directory Server E4s (Redhat) - vulnerabilities (CVEs)
16 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2026-09-07. Vendor: Redhat.
CVEs of Directory Server E4s
- CVE-2026-19843 - CVSS 8.4 (high), 2026-09-07: A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN)…
- CVE-2026-18922 - CVSS 9.8 (critical), 2026-09-07: A flaw was found in 389 Directory Server. During SASL PLAIN authentication, a stale identity carried in a Cyrus SASL auxiliary property from a prior failed…
- CVE-2026-18453 - CVSS 7.5 (high), 2026-09-07: A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of op_shared_search allows an unauthenticated remote…
- CVE-2026-18355 - CVSS 7.5 (high), 2026-09-07: A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), the wrapped-record length read…
- CVE-2026-76560 - CVSS 7.5 (high), 2026-09-07: A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN against an empty…
- CVE-2026-11770 - CVSS 7.5 (high), 2026-07-31: A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check…
- CVE-2026-15722 - CVSS 7.5 (high), 2026-07-31: A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters…
- CVE-2026-11610 - CVSS 8.8 (high), 2026-07-07: A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). After a successful SASL bind with integrity protection (SSF…
- CVE-2026-11774 - CVSS 7.6 (high), 2026-06-11: An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), adding sizeof(uint32_t) to a…
- CVE-2026-11788 - CVSS 7.5 (high), 2026-06-09: A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an…
- CVE-2026-9064 - CVSS 7.5 (high), 2026-05-20: A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function in the LDAP server does not enforce an upper bound on the number of controls per…
- CVE-2025-14905 - CVSS 7.2 (high), 2026-02-23: A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the `schema_attr_enum_callback` function within the `schema.c`…
- CVE-2024-5953 - CVSS 5.7 (medium), 2024-06-18: A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service…
- CVE-2024-3657 - CVSS 7.5 (high), 2024-05-28: A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service
- CVE-2024-2199 - CVSS 5.7 (medium), 2024-05-28: A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying…
- CVE-2024-1062 - CVSS 5.5 (medium), 2024-02-12: A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.
