RH
Product
Red Hat Directory Server 11
20
CVEs
0
On KEV
9.0
Max CVSS
2
New 30D
Severity mix
Critical 1High 3Medium 15Low 1
Watch
Add Red Hat Directory Server 11 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-86345 | 9.0 | Oct 1 | 389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result Affected: All versions, or not specified |
| CVE-2026-19843 | 8.4 | Sep 7 | 389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor Affected: All versions, or not specified |
| CVE-2026-86344 | 7.5 | Oct 1 | 389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue Affected: All versions, or not specified |
| CVE-2026-76560 | 7.5 | Sep 7 | 389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn Affected: All versions, or not specified |
| CVE-2026-78701 | 6.5 | Aug 25 | 389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos Affected: All versions, or not specified |
| CVE-2026-19404 | 6.5 | Aug 10 | 389-ds-base: 389-ds-base: missing authorization allows anonymous clients to start or abort cleanallruv replication maintenance Affected: All versions, or not specified |
| CVE-2026-11884 | 6.5 | Jun 10 | 389-ds-base: 389-ds-base: heap buffer overflow in schema objectclass serialization due to missing oc_superior in size calculation Affected: All versions, or not specified |
| CVE-2026-11789 | 6.5 | Jun 9 | 389-ds-base: 389-ds-base: smd5 password storage plugin salt length integer underflow crash Affected: All versions, or not specified |
| CVE-2026-11786 | 6.5 | Jun 9 | 389-ds-base: 389-ds-base: heap out-of-bounds read in ldif parser str2entry_state_information_from_type() Affected: All versions, or not specified |
| CVE-2026-11611 | 6.5 | Jun 8 | 389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditions Affected: All versions, or not specified |
| CVE-2026-11787 | 6.3 | Jun 9 | 389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsing Affected: All versions, or not specified |
| CVE-2026-18651 | 5.4 | Aug 3 | 389-ds-base: 389-ds-base: sasl plain bind installs connection credentials before account-lock check, allowing continued access as a locked account Affected: All versions, or not specified |
| CVE-2026-12528 | 5.4 | Jun 17 | 389-ds-base: 389-ds-base: heap-buffer-overflows in __aclp__normalize_acltxt() Affected: All versions, or not specified |
| CVE-2026-16560 | 5.3 | Jul 22 | 389-ds-base: 389-ds-base: heap-buffer-overflow in rdn_av_swap on quoted multivalued rdn Affected: All versions, or not specified |
| CVE-2026-14940 | 5.3 | Jul 7 | 389-ds-base: 389-ds-base: heap-buffer-overflow in dn normalization via quoted multivalued rdn Affected: All versions, or not specified |
| CVE-2026-11791 | 5.0 | Jun 18 | 389-ds-base: 389-ds-base: use-after-free in schema reload via attr_syntax_swap_ht() Affected: All versions, or not specified |
| CVE-2026-11793 | 4.9 | Jun 9 | 389-ds-base: 389-ds-base: stack buffer overflow in checkprefix() algorithm id parsing Affected: All versions, or not specified |
| CVE-2026-11790 | 4.9 | Jun 9 | 389-ds-base: 389-ds-base: pbkdf2 password storage plugin unbounded iteration count denial of service Affected: All versions, or not specified |
| CVE-2026-14969 | 4.4 | Jul 7 | 389-ds-base: 389-ds-base: static initialization vector in aes-cbc/3des-cbc attribute encryption Affected: All versions, or not specified |
| CVE-2026-15041 | 3.7 | Jul 8 | 389-ds-base: 389-ds-base: non-constant-time comparison in pbkdf2-sha256 password verification Affected: All versions, or not specified |
Showing 20