Important: Red Hat Security Advisory: 389-ds-base security update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure...

Important: Red Hat Security Advisory: 389-ds-base security update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure...

CVE-2026-75013: NULL Pointer Dereference

A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146B20201023. This affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation results in null pointer dereference. The attack can be launched remotely. The exploit is now public and may be used...

PT-2026-76759

A security vulnerability has been detected in TOTOLINK EX1200L 9.3.5u.6146 B20201023. Affected by this issue is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Password Configuration Handler. The manipulation leads to null pointer dereference. The attack can be...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100714)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100714 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi: use priv-vididev for ctx lookup in vidiconnectionioctl vidiconnectionioctl...

RHEL 9 : 389-ds-base (RHSA-2026:55423)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55423 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

RHEL 8 : 389-ds:1.4 (RHSA-2026:55757)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55757 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

Unity Linux 20.1070e Security Update: edk2 (UTSA-2026-099522)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099522 advisory. Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer...

Oracle Linux 9 : 389-ds-base (ELSA-2026-55423)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55423 advisory. - Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check rhel-9.8.z - Resolves:...

Unity Linux 20.1070e Security Update: patch (UTSA-2026-099445)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099445 advisory. GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive end-of-file newli...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099785)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099785 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: stream: fully roll back denied add-stream state When ADDOUTSTREAMS is denied, SCTP only...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100360)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100360 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix potential NULL pointer dereference in header processing If siwgethdr returns -EINVA...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099758)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099758 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: csiostor: Fix dereference of null pointer rn The error exit path when rn is NULL ends up...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100590)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100590 advisory. In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix locking in .getsockopt Mirror iucvsocksetsockopt and wrap the whole switch in...

Linux kernel hns3 DoS

The vulnerability of the hns3 component in the Linux operating system’s kernel is related to the dereferencing of a pointer whose expiration time has expired. Exploiting this vulnerability can allow an attacker to cause a service failure...

RHEL 10 : 389-ds-base (RHSA-2026:55424)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55424 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDA...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099914)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099914 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mvpp2main: fix possible OOB write in mvpp2ethtoolgetrxnfc rules is allocated in...

Unity Linux 20.1050e / 20.1070e Security Update: wavpack (UTSA-2025-000294)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-000294 advisory. A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL...