Directory Server Eus (Redhat) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2026-09-07. Vendor: Redhat.

CVEs of Directory Server Eus

• CVE-2026-19843 - CVSS 8.4 (high), 2026-09-07: A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN)…
• CVE-2025-14905 - CVSS 7.2 (high), 2026-02-23: A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the `schema_attr_enum_callback` function within the `schema.c`…
• CVE-2025-2487 - CVSS 4.9 (medium), 2025-03-18: A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return…
• CVE-2024-5953 - CVSS 5.7 (medium), 2024-06-18: A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service…
• CVE-2024-3657 - CVSS 7.5 (high), 2024-05-28: A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service
• CVE-2024-1062 - CVSS 5.5 (medium), 2024-02-12: A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.