CVE-2016-5416
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux...
7.5 HighFix available
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to read the default Access Control Instructions.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
3.23%Up 2.0 points since Feb 4, 2022
What each source reports
NVD Score used
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to read the default Access Control Instructions.
- Record
CVE-2016-5416- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to read the default Access Control Instructions.
- Record
CVE-2016-5416- Updated
- 2026-11-02
EUVDEUVD-2016-6361 No score
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to read the default Access Control Instructions.
- Record
EUVD-2016-6361- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c3fg-w6h6-qgf9
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux...
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to read the default Access Control Instructions.
- Record
GHSA-c3fg-w6h6-qgf9- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
OSV
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to read the default Access Control Instructions.
- Record
CVE-2016-5416- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-5416
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to read the default Access Control Instructions.
- Record
DEBIAN-CVE-2016-5416- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Show 4 moreShow less
OSVRHSA-2016:2594
Red Hat Security Advisory: 389-ds-base security, bug fix, and enhancement update
- Record
RHSA-2016:2594- CVSS 3.0
- 6.8 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2016:2765
Red Hat Security Advisory: 389-ds-base security, bug fix, and enhancement update
- Record
RHSA-2016:2765- CVSS 3.0
- 6.8 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-5416
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to read the default Access Control Instructions.
- Record
UBUNTU-CVE-2016-5416- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVSUSE-SU-2019:2155-1 No score
Security update for 389-ds
This update for 389-ds to version 1.4.0.26 fixes the following issues:
Security issues fixed:
- CVE-2016-5416: Fixed an information disclosure where a anonymous user could read the default ACI (bsc#991201).
- CVE-2018-1054: Fixed a denial of service via search filters in SetUnicodeStringFromUTF_8() (bsc#1083689).
- CVE-2018-1089: Fixed a buffer overflow via large filter value (bsc#1092187).
- CVE-2018-10871: Fixed an information disclosure in certain plugins leading to the disclosure of plaintext password to an privileged attackers (bsc#1099465).
- CVE-2018-14638: Fixed a denial of service through a crash in delete_passwdPolicy () (bsc#1108674).
- CVE-2018-14648: Fixed a denial of service caused by malformed values in search queries (bsc#1109609).
- CVE-2018-10935: Fixed a denial of service related to ldapsearch with server side sort (bsc#1105606).
- CVE-2019-3883: Fixed a denial of service caused by hanging LDAP requests over TLS (bsc#1132385).
- Record
SUSE-SU-2019:2155-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
389-ds-baseDebian:12 |
All versions, plus listed versions 2.3.1+dfsg1-12.3.1+dfsg1-1+deb12u12.3.4+dfsg1-12.3.4+dfsg1-1.12.4.4+dfsg1-1 Show 13 moreShow less2.4.4+dfsg1-32.4.5+dfsg1-13.0.2+dfsg1-13.1.1+dfsg1-13.1.1+dfsg1-23.1.1+dfsg1-33.1.2+dfsg1-13.1.2+vendor1-13.1.2+vendor1-23.3.0-13.3.0-23.3.1-13.3.1-3 |
None known |
389-ds-baseDebian:13 |
All versions, plus listed versions 3.1.2+dfsg1-13.1.2+dfsg1-1+deb13u13.1.2+vendor1-13.1.2+vendor1-23.3.0-13.3.0-23.3.1-13.3.1-3 |
None known |
389-ds-baseRed Hat:enterprise_linux:7::client |
before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-debuginfoRed Hat:enterprise_linux:7::client |
before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-develRed Hat:enterprise_linux:7::client |
before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-libsRed Hat:enterprise_linux:7::client |
before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-snmpRed Hat:enterprise_linux:7::client |
before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-baseRed Hat:enterprise_linux:7::computenode |
before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-develRed Hat:enterprise_linux:7::computenode |
before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
Show 35 moreShow less
| Package | Affected | Fixed |
|---|---|---|
389-ds-base-libsRed Hat:enterprise_linux:7::computenode |
before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-snmpRed Hat:enterprise_linux:7::computenode |
before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-debuginfoRed Hat:enterprise_linux:7::server |
before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-develRed Hat:enterprise_linux:7::server |
before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-snmpRed Hat:enterprise_linux:7::server |
before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-baseRed Hat:enterprise_linux:7::server |
before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-libsRed Hat:enterprise_linux:7::server |
before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-develRed Hat:enterprise_linux:7::workstation |
before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-snmpRed Hat:enterprise_linux:7::workstation |
before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-baseRed Hat:enterprise_linux:7::workstation |
before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-base-libsRed Hat:enterprise_linux:7::workstation |
before 0:1.3.5.10-11.el7 | 0:1.3.5.10-11.el7 |
389-ds-baseRed Hat:enterprise_linux:6::client |
before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-base-debuginfoRed Hat:enterprise_linux:6::client |
before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-base-develRed Hat:enterprise_linux:6::client |
before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-base-libsRed Hat:enterprise_linux:6::client |
before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-baseRed Hat:enterprise_linux:6::computenode |
before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-base-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-base-develRed Hat:enterprise_linux:6::computenode |
before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-base-libsRed Hat:enterprise_linux:6::computenode |
before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-baseRed Hat:enterprise_linux:6::server |
before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-base-debuginfoRed Hat:enterprise_linux:6::server |
before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-base-libsRed Hat:enterprise_linux:6::server |
before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-base-develRed Hat:enterprise_linux:6::server |
before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-baseRed Hat:enterprise_linux:6::workstation |
before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-base-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-base-libsRed Hat:enterprise_linux:6::workstation |
before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-ds-base-develRed Hat:enterprise_linux:6::workstation |
before 0:1.2.11.15-84.el6_8 | 0:1.2.11.15-84.el6_8 |
389-dsSUSE:Linux Enterprise Module for Server Applications 15 |
before 1.4.0.26~git0.8a2d3de6f-4.14.1 | 1.4.0.26~git0.8a2d3de6f-4.14.1 |
389-dsSUSE:Linux Enterprise Module for Server Applications 15 SP1 |
before 1.4.0.26~git0.8a2d3de6f-4.14.1 | 1.4.0.26~git0.8a2d3de6f-4.14.1 |
389-ds-baseUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.3.3.12-1build11.3.3.13-11.3.4.5-21.3.4.8-11.3.4.8-3 Show 4 moreShow less1.3.4.8-3ubuntu11.3.4.8-41.3.4.9-11.3.4.9-1ubuntu0.1~esm1 |
None known |
389-ds-baseUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.3.7.5-11.3.7.5-1build11.3.7.5-1build21.3.7.9-11.3.7.10-11.3.7.10-1ubuntu11.3.7.10-1ubuntu1+esm1 |
None known |
389-ds-baseUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 1.4.1.6-41.4.1.6-4build11.4.2.4-11.4.2.4-1build11.4.3.2-11.4.3.2-1build11.4.3.6-21.4.3.6-2ubuntu0.1~esm1 |
None known |
389-ds-baseUbuntu:22.04:LTS |
All versions, plus listed versions 1.4.4.11-2build11.4.4.11-2build21.4.4.17-12.0.11-22.0.14-12.0.15-12.0.15-1ubuntu2 |
None known |
389-ds-baseUbuntu:24.04:LTS |
All versions, plus listed versions 2.3.4+dfsg1-12.4.4+dfsg1-1ubuntu12.4.4+dfsg1-1ubuntu42.4.4+dfsg1-32.4.5+dfsg1-1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-5416 is a high vulnerability (CVSS 7.5) in Redhat Enterprise Linux Desktop, published June 8, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.23%, the 88th percentile. Fixed in 389-ds-base 0:1.3.5.10-11.el7.
References
securityfocus.com/bid/99097
rhn.redhat.com/errata/RHSA-2016-2594.html
bugzilla.redhat.com/show_bug.cgi?id=1349540
nvd.nist.gov/vuln/detail/CVE-2016-5416
access.redhat.com/errata/RHSA-2016:2594
Show 140 moreShow less
github.com/advisories/GHSA-c3fg-w6h6-qgf9
security-tracker.debian.org/tracker/CVE-2016-5416
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2594.json
cve.org/CVERecord?id=CVE-2016-4992
suse.com/support/update/announcement/2019/suse-su-20192155-1
bugzilla.suse.com/1083689
ubuntu.com/security/CVE-2016-5416
fedorahosted.org/389/ticket/48852