DS
Product
Directory Server
42
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 16Low 2
Watch
Add Directory Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-11770 | 7.5 | Jul 31 | 389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check Affected: 11.0; 12.0; 13.0 |
| CVE-2026-15722 | 7.5 | Jul 31 | 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing Affected: 11.0; 12.0 |
| CVE-2026-11788 | 7.5 | Jun 9 | 389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser Affected: 11.0; 12.0; 13.0 |
| CVE-2026-9064 | 7.5 | May 20 | 389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos) Affected: 11.0; 12.0; 13.0 |
| CVE-2022-1949 | 7.5 | Jun 2 | An access control bypass vulnerability found in 389-ds-base Affected: 11.0; 12.0 |
| CVE-2010-2222 | 7.5 | Nov 5 | The _ger_parse_control function in Red Hat Directory Server 8 and the 389 Directory Server allows attackers to cause a denial of service (NULL pointer dereference) via a crafted… Affected: 8.0 |
Showing 6