389-ds-base (Unknown) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2019-11-08. Vendor: Unknown.

CVEs of 389-ds-base

• CVE-2019-14824 - CVSS 6.5 (medium), 2019-11-08: A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some configurations, this…
• CVE-2018-14648 - CVSS 7.5 (high), 2018-09-28: A flaw was found in 389 Directory Server. A specially crafted search query could lead to excessive CPU consumption in the do_search() function. An…
• CVE-2018-14624 - CVSS 7.5 (high), 2018-09-06: A vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16. The lock controlling the error log was not correctly used when…
• CVE-2018-10871 - CVSS 7.2 (high), 2018-07-18: 389-ds-base before versions 1.3.8.5, 1.4.0.12 is vulnerable to a Cleartext Storage of Sensitive Information. By default, when the Replica and/or…
• CVE-2017-2668 - CVSS 6.5 (medium), 2018-06-22: 389-ds-base before versions 1.3.5.17 and 1.3.6.10 is vulnerable to an invalid pointer dereference in the way LDAP bind requests are handled. A remote…
• CVE-2018-10850 - CVSS 5.9 (medium), 2018-06-13: 389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds-base handles persistent search, resulting in a crash if the…