DS
Product
Directory Server
42
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 16Low 2
Watch
Add Directory Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-11770 | 7.5 | Jul 31 | 389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check Affected: 11.0; 12.0; 13.0 |
| CVE-2026-15722 | 7.5 | Jul 31 | 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing Affected: 11.0; 12.0 |
| CVE-2026-11788 | 7.5 | Jun 9 | 389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser Affected: 11.0; 12.0; 13.0 |
| CVE-2026-9064 | 7.5 | May 20 | 389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos) Affected: 11.0; 12.0; 13.0 |
| CVE-2022-1949 | 7.5 | Jun 2 | An access control bypass vulnerability found in 389-ds-base Affected: 11.0; 12.0 |
| CVE-2010-2222 | 7.5 | Nov 5 | The _ger_parse_control function in Red Hat Directory Server 8 and the 389 Directory Server allows attackers to cause a denial of service (NULL pointer dereference) via a crafted… Affected: 8.0 |
| CVE-2026-11789 | 6.5 | Jun 9 | 389-ds-base: 389-ds-base: smd5 password storage plugin salt length integer underflow crash Affected: 11.0; 12.0; 13.0 |
| CVE-2026-11786 | 6.5 | Jun 9 | 389-ds-base: 389-ds-base: heap out-of-bounds read in ldif parser str2entry_state_information_from_type() Affected: 11.0; 12.0; 13.0 |
| CVE-2026-11611 | 6.5 | Jun 8 | 389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditions Affected: 11.0; 12.0; 13.0 |
| CVE-2024-6237 | 6.5 | Jul 9 | A flaw was found in the 389 Directory Server Affected: 12.0 |
| CVE-2022-2850 | 6.5 | Oct 14 | A flaw was found In 389-ds-base Affected: 11.0; 12.0 |
| CVE-2026-11787 | 6.3 | Jun 9 | 389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsing Affected: 11.0; 12.0; 13.0 |
| CVE-2024-1062 | 5.5 | Feb 12 | A heap overflow flaw was found in 389-ds-base Affected: 11.7; 11.8; 12.0 |
| CVE-2023-1055 | 5.5 | Feb 27 | A flaw was found in RHDS 11 and RHDS 12 Affected: 11.5; 11.6; 12.0; 12.1 |
| CVE-2026-18651 | 5.4 | Aug 3 | 389-ds-base: 389-ds-base: sasl plain bind installs connection credentials before account-lock check, allowing continued access as a locked account Affected: 11.0; 12.0; 13.0 |
| CVE-2026-12528 | 5.4 | Jun 17 | 389-ds-base: 389-ds-base: heap-buffer-overflows in __aclp__normalize_acltxt() Affected: 11.0; 12.0; 13.0 |
| CVE-2026-14940 | 5.3 | Jul 7 | 389-ds-base: 389-ds-base: heap-buffer-overflow in dn normalization via quoted multivalued rdn Affected: 11.0; 12.0; 13.0 |
| CVE-2020-35518 | 5.3 | Mar 26 | When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not Affected: 11.0 |
| CVE-2026-11791 | 5.0 | Jun 18 | 389-ds-base: 389-ds-base: use-after-free in schema reload via attr_syntax_swap_ht() Affected: 11.0; 12.0; 13.0 |
| CVE-2026-11790 | 4.9 | Jun 9 | 389-ds-base: 389-ds-base: pbkdf2 password storage plugin unbounded iteration count denial of service Affected: 11.0; 12.0; 13.0 |
| CVE-2026-14969 | 4.4 | Jul 7 | 389-ds-base: 389-ds-base: static initialization vector in aes-cbc/3des-cbc attribute encryption Affected: 11.0; 12.0; 13.0 |
| CVE-2026-11785 | 4.3 | Jun 9 | 389-ds-base: 389-ds-base: partial stack address information leak via ber_printf type confusion in sso token handler Affected: 12.0; 13.0 |
| CVE-2026-15041 | 3.7 | Jul 8 | 389-ds-base: 389-ds-base: non-constant-time comparison in pbkdf2-sha256 password verification Affected: 11.0; 12.0; 13.0 |
| CVE-2010-3282 | 3.3 | Jan 9 | 389 Directory Server before 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server before B.08.10.03, when audit logging is enabled, logs the Directory Manager… Affected: 8.0 |
| CVE-2014-3562 | – | Aug 21 | Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory Affected: 8.0 |
| CVE-2013-4485 | – | Nov 23 | 389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote authenticated users to cause a denial of service (crash) via multiple @ characters in… Affected: through 8.2; 7.1; 8.0; 8.1 |
| CVE-2013-2219 | – | Jul 31 | The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain… Affected: through 8.2; 7.1; 8.0; 8.1 |
| CVE-2012-2746 | – | Jul 3 | 389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), when the password of a LDAP user has been changed and audit logging is enabled, saves the new… Affected: through 8.2; 7.1; 8.0; 8.1 |
| CVE-2012-2678 | – | Jul 3 | 389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the password for a LDAP user has been changed and before the server has been reset,… Affected: through 8.2; 7.1; 8.0; 8.1 |
| CVE-2011-0019 | – | Feb 23 | slapd (aka ns-slapd) in 389 Directory Server 1.2.7.5 (aka Red Hat Directory Server 8.2.x or dirsrv) does not properly handle simple paged result searches, which allows remote… Affected: 8.2; 8.2.3 |
| CVE-2011-0022 | – | Feb 23 | The setup scripts in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x), when multiple unprivileged instances are configured, use 0777 permissions for the… Affected: 8.2; 8.2.3 |
| CVE-2011-0532 | – | Feb 23 | The (1) backup and restore scripts, (2) main initialization script, and (3) ldap-agent script in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x) place a… Affected: 8.2; 8.2.3 |
| CVE-2010-2241 | – | Aug 17 | The (1) setup-ds.pl and (2) setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local… Affected: 8.0; 8.1 |
| CVE-2008-2929 | – | Aug 29 | Multiple cross-site scripting (XSS) vulnerabilities in the adminutil library in the Directory Server Administration Express and Directory Server Gateway (DSGW) web interface in… Affected: 7.1; 7.1; 7.1; 7.1; 7.1; 7.1; +2 more |
| CVE-2008-3283 | – | Aug 29 | Multiple memory leaks in Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 and earlier allow remote attackers to cause a… Affected: 7.1; 7.1; 7.1; 7.1; 7.1; 7.1; +1 more |
| CVE-2008-2930 | – | Aug 29 | Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 allow remote attackers to cause a denial of service (CPU consumption and… Affected: 7.1; 7.1; 7.1; 7.1; 7.1; 7.1; +1 more |
| CVE-2008-2928 | – | Aug 29 | Multiple buffer overflows in the adminutil library in CGI applications in Red Hat Directory Server 7.1 before SP7 allow remote attackers to cause a denial of service (daemon… Affected: 7.1; 7.1; 7.1; 7.1; 7.1; 7.1 |
| CVE-2008-1677 | – | May 12 | Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to cause a denial of service (slapd crash) and… Affected: 7.1; 7.1; 7.1; 7.1; 7.1; 8.0 |
| CVE-2008-0892 | – | Apr 16 | The replication monitor CGI script (repl-monitor-cgi.pl) in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute… Affected: 7.1 |
| CVE-2008-0893 | – | Apr 16 | Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, does not properly restrict access to CGI scripts, which allows remote attackers to perform… Affected: 8.0; 8.0 |
| CVE-2008-0889 | – | Mar 20 | Red Hat Directory Server 8.0, when running on Red Hat Enterprise Linux, uses insecure permissions for the redhat-idm-console script, which allows local users to execute arbitrary… Affected: 8.0; 8.0 |
| CVE-2008-0890 | – | Mar 12 | Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR files and execute arbitrary code via unknown… Affected: through 7.1 |
Showing 42