Security
فارسی
All products

Red Hat Directory Server 11/389-ds-base

Red Hat · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
389-ds-base: 389-ds-base: SASL PLAIN bind installs connection credentials before account-lock check, allowing continued access as a locked accountCVE-2026-18651 Red Hat Directory Server 11/389-ds-baseRed Hat Directory Server 12/389-ds-base Red Hat Medium No fix reported
389-ds-base: 389-ds-base: missing authorization allows anonymous clients to start or abort CleanAllRUV replication maintenanceCVE-2026-19404 Red Hat Directory Server 11/389-ds-baseRed Hat Directory Server 12/389-ds-base Red Hat Medium No fix reported
389-ds-base: 389-ds: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DNCVE-2026-76560 Red Hat Directory Server 11/389-ds-baseRed Hat Directory Server 12/389-ds-base Red Hat High No fix reported
389-ds-base: 389-ds-base: Command injection via unescaped LDAP DN in Cockpit 389 Console LDAP editorCVE-2026-19843 Red Hat Directory Server 11/389-ds-baseRed Hat Directory Server 12/389-ds-base Red Hat High No fix reported
389-ds-base: 389-ds-base: StartTLS plaintext-buffer retention allows on-path attacker to forge an LDAP client's authentication resultCVE-2026-86345 Red Hat Directory Server 11/389-ds-baseRed Hat Directory Server 11/redhat-ds:11/389-ds-base Red Hat Medium No fix reported
389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-PDU connection requeueCVE-2026-86344 Red Hat Directory Server 11/389-ds-baseRed Hat Directory Server 11/redhat-ds:11/389-ds-base Red Hat High No fix reported