All products

Red Hat Enterprise Linux 8/389-ds-base

Red Hat · Package
14 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
389-ds-base: 389-ds-base: heap out-of-bounds read in LDIF parser str2entry_state_information_from_type()CVE-2026-11786 Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base Red Hat Low No fix reported
389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsingCVE-2026-11787 Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base Red Hat Medium No fix reported
389-ds-base: 389-ds-base: Content Sync plugin unbounded queue growth and race conditionsCVE-2026-11611 Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base Red Hat Medium No fix reported
389-ds-base: 389-ds-base: SMD5 password storage plugin salt length integer underflow crashCVE-2026-11789 Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base Red Hat Medium No fix reported
389-ds-base: 389-ds-base: PBKDF2 password storage plugin unbounded iteration count denial of serviceCVE-2026-11790 Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base Red Hat Medium No fix reported
389-ds-base: 389-ds-base: use-after-free in schema reload via attr_syntax_swap_ht()CVE-2026-11791 Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base Red Hat Medium No fix reported
389-ds-base: 389-ds-base: stack buffer overflow in checkPrefix() algorithm ID parsingCVE-2026-11793 Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base Red Hat Low No fix reported
389-ds-base: 389-ds-base: heap-buffer-overflows in __aclp__normalize_acltxt()CVE-2026-12528 Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base Red Hat Low No fix reported
389-ds-base: 389-ds-base: heap buffer overflow in schema objectclass serialization due to missing oc_superior in size calculationCVE-2026-11884 Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base Red Hat Medium No fix reported
389-ds-base: 389-ds-base: heap-buffer-overflow in rdn_av_swap on quoted multivalued RDNCVE-2026-16560 Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base Red Hat Medium No fix reported
389-ds-base: 389-ds-base: missing authorization allows anonymous clients to start or abort CleanAllRUV replication maintenanceCVE-2026-19404 Red Hat Directory Server 11/389-ds-baseRed Hat Directory Server 12/389-ds-base Red Hat Medium No fix reported
389-ds-base: 389-ds: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DNCVE-2026-76560 Red Hat Directory Server 11/389-ds-baseRed Hat Directory Server 12/389-ds-base Red Hat High No fix reported
389-ds-base: 389-ds-base: StartTLS plaintext-buffer retention allows on-path attacker to forge an LDAP client's authentication resultCVE-2026-86345 Red Hat Directory Server 11/389-ds-baseRed Hat Directory Server 11/redhat-ds:11/389-ds-base Red Hat Medium No fix reported
389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-PDU connection requeueCVE-2026-86344 Red Hat Directory Server 11/389-ds-baseRed Hat Directory Server 11/redhat-ds:11/389-ds-base Red Hat High No fix reported