CVE-2013-0312

389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service (crash)...

5.0 MediumFix available

389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service (crash) via a zero length LDAP control sequence.

Exploit likelihood

2.73%Up 1.4 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service (crash) via a zero length LDAP control sequence.

Record: CVE-2013-0312
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-189
Updated: 2026-11-02

CVE List No score

389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service (crash) via a zero length LDAP control sequence.

Record: CVE-2013-0312
Updated: 2026-11-02

EUVDEUVD-2013-0330 No score

389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service (crash) via a zero length LDAP control sequence.

Record: EUVD-2013-0330
Updated: 2026-11-03

GitHub AdvisoriesGHSA-j8v7-ppwf-h5jg No score

389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service (crash)...

389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service (crash) via a zero length LDAP control sequence.

Record: GHSA-j8v7-ppwf-h5jg
Updated: 2026-11-02

OSV No score

389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service (crash) via a zero length LDAP control sequence.

Record: CVE-2013-0312
Updated: 2026-11-02

OSVDEBIAN-CVE-2013-0312 No score

389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service (crash) via a zero length LDAP control sequence.

Record: DEBIAN-CVE-2013-0312
Updated: 2026-11-02

Affected products

fedoraproject 389 directory server

Affected packages

Affected packages
Package	Affected	Fixed
`389-ds-base` Debian:12	before 1.3.0.3-1	1.3.0.3-1
`389-ds-base` Debian:13	before 1.3.0.3-1	1.3.0.3-1
`389-ds-base` Red Hat:enterprise_linux:6::client	before 0:1.2.11.15-12.el6_4	0:1.2.11.15-12.el6_4
`389-ds-base-debuginfo` Red Hat:enterprise_linux:6::client	before 0:1.2.11.15-12.el6_4	0:1.2.11.15-12.el6_4
`389-ds-base-devel` Red Hat:enterprise_linux:6::client	before 0:1.2.11.15-12.el6_4	0:1.2.11.15-12.el6_4
`389-ds-base-libs` Red Hat:enterprise_linux:6::client	before 0:1.2.11.15-12.el6_4	0:1.2.11.15-12.el6_4
`389-ds-base` Red Hat:enterprise_linux:6::computenode	before 0:1.2.11.15-12.el6_4	0:1.2.11.15-12.el6_4
`389-ds-base-debuginfo` Red Hat:enterprise_linux:6::computenode	before 0:1.2.11.15-12.el6_4	0:1.2.11.15-12.el6_4
`389-ds-base-devel` Red Hat:enterprise_linux:6::computenode	before 0:1.2.11.15-12.el6_4	0:1.2.11.15-12.el6_4
`389-ds-base-libs` Red Hat:enterprise_linux:6::computenode	before 0:1.2.11.15-12.el6_4	0:1.2.11.15-12.el6_4

Show 8 moreShow less

Affected packages
Package	Affected	Fixed
`389-ds-base` Red Hat:enterprise_linux:6::server	before 0:1.2.11.15-12.el6_4	0:1.2.11.15-12.el6_4
`389-ds-base-debuginfo` Red Hat:enterprise_linux:6::server	before 0:1.2.11.15-12.el6_4	0:1.2.11.15-12.el6_4
`389-ds-base-libs` Red Hat:enterprise_linux:6::server	before 0:1.2.11.15-12.el6_4	0:1.2.11.15-12.el6_4
`389-ds-base-devel` Red Hat:enterprise_linux:6::server	before 0:1.2.11.15-12.el6_4	0:1.2.11.15-12.el6_4
`389-ds-base` Red Hat:enterprise_linux:6::workstation	before 0:1.2.11.15-12.el6_4	0:1.2.11.15-12.el6_4
`389-ds-base-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:1.2.11.15-12.el6_4	0:1.2.11.15-12.el6_4
`389-ds-base-libs` Red Hat:enterprise_linux:6::workstation	before 0:1.2.11.15-12.el6_4	0:1.2.11.15-12.el6_4
`389-ds-base-devel` Red Hat:enterprise_linux:6::workstation	before 0:1.2.11.15-12.el6_4	0:1.2.11.15-12.el6_4

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-0312 is a medium vulnerability (CVSS 5.0) in Fedoraproject 389 Directory Server, published March 13, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.73%, the 86th percentile. Fixed in 389-ds-base 1.3.0.3-1.

References

Show 16 moreShow less