Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Enterprise Linux 8/389-ds-base
Red Hat
· Package
14 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
389-ds-base: 389-ds-base: heap out-of-bounds read in LDIF parser str2entry_state_information_from_type()
CVE-2026-11786
Red Hat Directory Server 11/redhat-ds:11/389-ds-base
Red Hat Directory Server 12/redhat-ds:12/389-ds-base
Red Hat
Low
No fix reported
Not recorded
389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsing
CVE-2026-11787
Red Hat Directory Server 11/redhat-ds:11/389-ds-base
Red Hat Directory Server 12/redhat-ds:12/389-ds-base
Red Hat
Medium
No fix reported
Not recorded
389-ds-base: 389-ds-base: Content Sync plugin unbounded queue growth and race conditions
CVE-2026-11611
Red Hat Directory Server 11/redhat-ds:11/389-ds-base
Red Hat Directory Server 12/redhat-ds:12/389-ds-base
Red Hat
Medium
No fix reported
Not recorded
389-ds-base: 389-ds-base: SMD5 password storage plugin salt length integer underflow crash
CVE-2026-11789
Red Hat Directory Server 11/redhat-ds:11/389-ds-base
Red Hat Directory Server 12/redhat-ds:12/389-ds-base
Red Hat
Medium
No fix reported
Not recorded
389-ds-base: 389-ds-base: PBKDF2 password storage plugin unbounded iteration count denial of service
CVE-2026-11790
Red Hat Directory Server 11/redhat-ds:11/389-ds-base
Red Hat Directory Server 12/redhat-ds:12/389-ds-base
Red Hat
Medium
No fix reported
Not recorded
389-ds-base: 389-ds-base: use-after-free in schema reload via attr_syntax_swap_ht()
CVE-2026-11791
Red Hat Directory Server 11/redhat-ds:11/389-ds-base
Red Hat Directory Server 12/redhat-ds:12/389-ds-base
Red Hat
Medium
No fix reported
Not recorded
389-ds-base: 389-ds-base: stack buffer overflow in checkPrefix() algorithm ID parsing
CVE-2026-11793
Red Hat Directory Server 11/redhat-ds:11/389-ds-base
Red Hat Directory Server 12/redhat-ds:12/389-ds-base
Red Hat
Low
No fix reported
Not recorded
389-ds-base: 389-ds-base: heap-buffer-overflows in __aclp__normalize_acltxt()
CVE-2026-12528
Red Hat Directory Server 11/redhat-ds:11/389-ds-base
Red Hat Directory Server 12/redhat-ds:12/389-ds-base
Red Hat
Low
No fix reported
Not recorded
389-ds-base: 389-ds-base: heap buffer overflow in schema objectclass serialization due to missing oc_superior in size calculation
CVE-2026-11884
Red Hat Directory Server 11/redhat-ds:11/389-ds-base
Red Hat Directory Server 12/redhat-ds:12/389-ds-base
Red Hat
Medium
No fix reported
Not recorded
389-ds-base: 389-ds-base: heap-buffer-overflow in rdn_av_swap on quoted multivalued RDN
CVE-2026-16560
Red Hat Directory Server 11/redhat-ds:11/389-ds-base
Red Hat Directory Server 12/redhat-ds:12/389-ds-base
Red Hat
Medium
No fix reported
Not recorded
389-ds-base: 389-ds-base: missing authorization allows anonymous clients to start or abort CleanAllRUV replication maintenance
CVE-2026-19404
Red Hat Directory Server 11/389-ds-base
Red Hat Directory Server 12/389-ds-base
Red Hat
Medium
No fix reported
Not recorded
389-ds-base: 389-ds: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DN
CVE-2026-76560
Red Hat Directory Server 11/389-ds-base
Red Hat Directory Server 12/389-ds-base
Red Hat
High
No fix reported
Not recorded
389-ds-base: 389-ds-base: StartTLS plaintext-buffer retention allows on-path attacker to forge an LDAP client's authentication result
CVE-2026-86345
Red Hat Directory Server 11/389-ds-base
Red Hat Directory Server 11/redhat-ds:11/389-ds-base
Red Hat
Medium
No fix reported
Not recorded
389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-PDU connection requeue
CVE-2026-86344
Red Hat Directory Server 11/389-ds-base
Red Hat Directory Server 11/redhat-ds:11/389-ds-base
Red Hat
High
No fix reported
Not recorded