CVE-2008-2930

Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server...

7.1 HighPublic exploit

Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 allow remote attackers to cause a denial of service (CPU consumption and search outage) via crafted LDAP search requests with patterns, related to a single-threaded regular-expression subsystem.

Exploit likelihood

6.55%Down 6.0 points since Feb 4, 2022

What each source reports

NVD Score used 7.1

Record: CVE-2008-2930
CVSS 2.0: 7.1 HighAV:N/AC:M/Au:N/C:N/I:N/A:C
Weakness: CWE-399
Updated: 2026-11-02

CVE List No score

Record: CVE-2008-2930
Updated: 2026-11-02

EUVDEUVD-2008-2923 No score

Record: EUVD-2008-2923
Updated: 2026-11-03

GitHub AdvisoriesGHSA-622c-3525-jxfp No score

Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server...

Record: GHSA-622c-3525-jxfp
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`redhat-ds` Red Hat:directory_server:7.1 From an advisory covering 4 CVEs	before 0:7.1SP7-14.RHEL4	0:7.1SP7-14.RHEL4
`redhat-ds-admin` Red Hat:directory_server:8::el5 From an advisory covering 2 CVEs	before 0:8.0.4-3.el5dsrv	0:8.0.4-3.el5dsrv
`redhat-ds-admin-debuginfo` Red Hat:directory_server:8::el5 From an advisory covering 2 CVEs	before 0:8.0.4-3.el5dsrv	0:8.0.4-3.el5dsrv
`redhat-ds-base` Red Hat:directory_server:8::el5 From an advisory covering 2 CVEs	before 0:8.0.4-7.el5dsrv	0:8.0.4-7.el5dsrv
`redhat-ds-base-debuginfo` Red Hat:directory_server:8::el5 From an advisory covering 2 CVEs	before 0:8.0.4-7.el5dsrv	0:8.0.4-7.el5dsrv
`redhat-ds-base-devel` Red Hat:directory_server:8::el5 From an advisory covering 2 CVEs	before 0:8.0.4-7.el5dsrv	0:8.0.4-7.el5dsrv
`redhat-ds-base` Red Hat:enterprise_ipa:1.0 From an advisory covering 2 CVEs	before 0:8.0.4-7.el5dsrv	0:8.0.4-7.el5dsrv
`redhat-ds-base-debuginfo` Red Hat:enterprise_ipa:1.0 From an advisory covering 2 CVEs	before 0:8.0.4-7.el5dsrv	0:8.0.4-7.el5dsrv
`redhat-ds-base-devel` Red Hat:enterprise_ipa:1.0 From an advisory covering 2 CVEs	before 0:8.0.4-7.el5dsrv	0:8.0.4-7.el5dsrv

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	RedHat 8/9 - Directory Server Crafted Search Pattern Denial of Service	2008-08-27

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-2930 is a high vulnerability (CVSS 7.1) in Fedora Directory Server, published August 29, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.55%, the 93rd percentile. No source names a fixed version.

References

Show 51 moreShow less