Security
فارسی
All products

Red Hat Enterprise Linux 6/389-ds-base

Red Hat · Package
42 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
389-ds-base: Password brute-force possible for locked account due to different return codesCVE-2017-7551 Red Hat Enterprise Linux 6/389-ds-base Red Hat Medium No fix reported
389-ds-base: race condition on reference counter leads to DoS using persistent searchCVE-2018-10850 Red Hat Enterprise Linux 6/389-ds-base Red Hat Medium No fix reported
389-ds-base: replication and the Retro Changelog plugin store plaintext password by defaultCVE-2018-10871 Red Hat Enterprise Linux 6/389-ds-baseRed Hat Enterprise Linux 7/389-ds-base Red Hat Medium No fix reported
389-ds-base: Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedlyCVE-2018-14638 Red Hat Enterprise Linux 6/389-ds-base Red Hat Medium No fix reported
389-ds-base: Server crash through modify command with large DNCVE-2018-14624 Red Hat Enterprise Linux 6/389-ds-base Red Hat Medium No fix reported
389-ds-base: Mishandled search requests in servers/slapd/search.c:do_search() allows for denial of serviceCVE-2018-14648 Red Hat Enterprise Linux 6/389-ds-base Red Hat Medium No fix reported
389-ds-base: DoS via hanging secured connectionsCVE-2019-3883 Red Hat Enterprise Linux 6/389-ds-base Red Hat Medium No fix reported
389-ds-base: Read permission check bypass via the deref pluginCVE-2019-14824 Red Hat Enterprise Linux 6/389-ds-base Red Hat High No fix reported
389-ds-base: information disclosure during the binding of a DNCVE-2020-35518 Red Hat Enterprise Linux 6/389-ds-base Red Hat Medium No fix reported
389-ds-base: sync_repl NULL pointer dereference in sync_create_state_control()CVE-2021-3514 Red Hat Enterprise Linux 6/389-ds-baseRed Hat Enterprise Linux 7/389-ds-base Red Hat Medium No fix reported
389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeedCVE-2021-3652 Red Hat Enterprise Linux 6/389-ds-base Red Hat Low No fix reported
389-ds-base: sending crafted message could result in DoSCVE-2022-0918 Red Hat Directory Server 12/redhat-ds:12/389-ds-baseRed Hat Enterprise Linux 6/389-ds-base Red Hat Medium No fix reported
389-ds-base: expired password was still allowed to access the databaseCVE-2022-0996 Red Hat Enterprise Linux 6/389-ds-base Red Hat Low No fix reported
389-ds-base: access control bypass by query (filter in LDAP terms) optimiserCVE-2022-1949 Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base Red Hat Medium No fix reported
389-ds-base: SIGSEGV in sync_replCVE-2022-2850 Red Hat Enterprise Linux 6/389-ds-base Red Hat Medium No fix reported
389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)CVE-2024-1062 Red Hat Directory Server 12/redhat-ds:12/389-ds-baseRed Hat Enterprise Linux 6/389-ds-base Red Hat Medium No fix reported
389-ds-base: potential denial of service via specially crafted kerberos AS-REQ requestCVE-2024-3657 Red Hat Enterprise Linux 6/389-ds-base Red Hat High No fix reported
389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.cCVE-2024-2199 Red Hat Enterprise Linux 6/389-ds-base Red Hat Medium No fix reported
389-ds-base: Malformed userPassword hash may cause Denial of ServiceCVE-2024-5953 Red Hat Enterprise Linux 6/389-ds-base Red Hat Medium No fix reported
389-ds-base: null pointer dereference leads to denial of serviceCVE-2025-2487 Red Hat Enterprise Linux 6/389-ds-baseRed Hat Enterprise Linux 7/389-ds-base Red Hat Medium No fix reported