3D
Product
389 Directory Server
39
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 13Medium 5Low 1
Watch
Add 389 Directory Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-14824 | 6.5 | Nov 8 | A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values Affected: All versions, or not specified |
| CVE-2017-2668 | 6.5 | Jun 22 | 389-ds-base before versions 1.3.5.17 and 1.3.6.10 is vulnerable to an invalid pointer dereference in the way LDAP bind requests are handled Affected: 1.3.5.0 before 1.3.5.17; 1.3.6.0 before 1.3.6.10 |
| CVE-2018-10850 | 5.9 | Jun 13 | 389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds-base handles persistent search, resulting in a crash if the server is under load Affected: before 1.4.0.10 |
| CVE-2011-0704 | 5.9 | May 4 | 389 Directory Server 1.2.7.5, when built with mozldap, allows remote attackers to cause a denial of service (replica crash) by sending an empty modify request Affected: 1.2.7.5 |
| CVE-2019-10224 | 4.6 | Nov 25 | A flaw has been found in 389-ds-base versions 1.4.x.x before 1.4.1.3 Affected: 1.4.0.0 before 1.4.1.3 |
Showing 5
