| Tokio: Race condition in `tokio::time::Interval`CVE-2026-115567 · GHSA-5WJR-9356-4WC8Version ranges need review. |
tokioAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
Rust / CargoRed Hat |
Medium
|
Fix reported |
|
| 389-ds-base: Heap buffer overflow in uiduniq.cCVE-2017-2591 |
Red Hat Enterprise Linux 7/389-ds-base |
Red Hat |
Low
|
No fix reported |
|
| 389-ds-base: replication and the Retro Changelog plugin store plaintext password by defaultCVE-2018-10871 |
Red Hat Enterprise Linux 6/389-ds-baseRed Hat Enterprise Linux 7/389-ds-base |
Red Hat |
Medium
|
No fix reported |
|
| 389-ds-base: Insufficient fix for CVE-2018-14648 denial of service in RHEL-7.5CVE-2019-10171 |
Red Hat Enterprise Linux 7/389-ds-base |
Red Hat |
High
|
No fix reported |
|
| 389-ds-base: sync_repl NULL pointer dereference in sync_create_state_control()CVE-2021-3514 |
Red Hat Enterprise Linux 6/389-ds-baseRed Hat Enterprise Linux 7/389-ds-base |
Red Hat |
Medium
|
No fix reported |
|
| 389-ds-base: access control bypass by query (filter in LDAP terms) optimiserCVE-2022-1949 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
Medium
|
No fix reported |
|
| 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)CVE-2024-1062 |
Red Hat Directory Server 12/redhat-ds:12/389-ds-baseRed Hat Enterprise Linux 6/389-ds-base |
Red Hat |
Medium
|
No fix reported |
|
| 389-ds-base: null pointer dereference leads to denial of serviceCVE-2025-2487 |
Red Hat Enterprise Linux 6/389-ds-baseRed Hat Enterprise Linux 7/389-ds-base |
Red Hat |
Medium
|
No fix reported |
|
| 389-ds-base: 389-ds-base: heap out-of-bounds read in LDIF parser str2entry_state_information_from_type()CVE-2026-11786 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
Low
|
No fix reported |
|
| 389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsingCVE-2026-11787 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
Medium
|
No fix reported |
|
| 389-ds-base: 389-ds-base: Content Sync plugin unbounded queue growth and race conditionsCVE-2026-11611 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
Medium
|
No fix reported |
|
| 389-ds-base: 389-ds-base: SMD5 password storage plugin salt length integer underflow crashCVE-2026-11789 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
Medium
|
No fix reported |
|
| 389-ds-base: 389-ds-base: PBKDF2 password storage plugin unbounded iteration count denial of serviceCVE-2026-11790 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
Medium
|
No fix reported |
|
| 389-ds-base: 389-ds-base: use-after-free in schema reload via attr_syntax_swap_ht()CVE-2026-11791 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
Medium
|
No fix reported |
|
| 389-ds-base: 389-ds-base: stack buffer overflow in checkPrefix() algorithm ID parsingCVE-2026-11793 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
Low
|
No fix reported |
|
| uuid: uuid: Unexpected data writes when using external output buffers with specific UUID versionsCVE-2026-41988 |
Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9Confidential Cluster Operator/confidential-clusters-beta/buildroot-rhel9 |
Red Hat |
Low
|
No fix reported |
|
| 389-ds-base: 389-ds-base: heap-buffer-overflows in __aclp__normalize_acltxt()CVE-2026-12528 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
Low
|
No fix reported |
|
| 389-ds-base: 389-ds-base: heap buffer overflow in schema objectclass serialization due to missing oc_superior in size calculationCVE-2026-11884 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
Medium
|
No fix reported |
|
| 389-ds-base: 389-ds-base: heap-buffer-overflow in DN normalization via quoted multivalued RDNCVE-2026-14940 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
Medium
|
No fix reported |
|
| 389-ds-base: 389-ds-base: Static initialization vector in AES-CBC/3DES-CBC attribute encryptionCVE-2026-14969 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
Medium
|
No fix reported |
|
