1327 matches found
CVE-2022-0918
CVE-2022-0918 Pagina CVE di Red Hat: https://access.redhat.com/security/cve/cve-2022-0918 Issue GitHub con patch collegate: https://github.com/389ds/389-ds-base/issues/5242 PoC L'applicazione PoC accetta un singolo IP, sia IPv4 che IPv6 funzioneranno. Di default invia il messaggio alla porta 389;...
CVE-2026-78701
A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication and Security Layer SASL UNBIND process. By sending a specially crafted request, the attacker can cause a connection to stall, leading to resource exhaustion and a Denial of...
EUVD-2026-65312
A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication and Security Layer SASL UNBIND process. By sending a specially crafted request, the attacker can cause a connection to stall, leading to resource exhaustion and a Denial of...
CVE-2026-78701 389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos
A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication and Security Layer SASL UNBIND process. By sending a specially crafted request, the attacker can cause a connection to stall, leading to resource exhaustion and a Denial of...
CVE-2026-78701
CVE-2026-78701 affects 389-ds-base , where an incomplete fix related to CVE-2026-11610 in the SASL UNBIND process allows a remote, authenticated attacker to send a specially crafted request that causes a connection to stall. This leads to resource exhaustion and a Denial of Service for the server...
CVE-2026-78701
A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication and Security Layer SASL UNBIND process. By sending a specially crafted request, the attacker can cause a connection to stall, leading to resource exhaustion and a Denial of...
DEBIAN-CVE-2026-13097
A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to...
CVE-2026-13097
A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to...
PT-2026-78916
Name of the Vulnerable Software and Affected Versions FreeIPA affected versions not specified Description A privilege escalation flaw exists in FreeIPA due to a failure in the 389-ds directory server to properly enforce uniqueness constraints on Kerberos principal name attributes. The server does...
Linux Distros Unpatched Vulnerability : CVE-2026-13097
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does n...
RHSA-2026:55794 Red Hat Security Advisory: 389-ds:1.4 security update
Bulletin has no description...
RHSA-2026:55758 Red Hat Security Advisory: 389-ds-base security update
Bulletin has no description...
RHSA-2026:55756 Red Hat Security Advisory: 389-ds:1.4 security update
Bulletin has no description...
RHSA-2026:55530 Red Hat Security Advisory: 389-ds:1.4 security update
Bulletin has no description...
RHSA-2026:55423 Red Hat Security Advisory: 389-ds-base security update
Bulletin has no description...
RHSA-2026:55424 Red Hat Security Advisory: 389-ds-base security update
Bulletin has no description...
Important: Red Hat Security Advisory: redhat-ds:12 security update
An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12.2 E4S for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser
A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure...
389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing
A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...
RLSA-2026:55424 Important: 389-ds-base security update
389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Security Fixes: 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status...