CVE-2014-3562

Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote...

5.0 MediumFix available

Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory.

Exploit likelihood

2.20%Up 1.1 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory.

Record: CVE-2014-3562
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

CVE List No score

Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory.

Record: CVE-2014-3562
Updated: 2026-11-02

EUVDEUVD-2014-3544 No score

Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory.

Record: EUVD-2014-3544
Updated: 2026-11-03

GitHub AdvisoriesGHSA-6vvf-j83f-44mh No score

Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote...

Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory.

Record: GHSA-6vvf-j83f-44mh
Weakness: CWE-200
Updated: 2026-11-02

OSV No score

Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory.

Record: CVE-2014-3562
Updated: 2026-11-02

OSVDEBIAN-CVE-2014-3562 No score

Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory.

Record: DEBIAN-CVE-2014-3562
Updated: 2026-11-02

OSVMGASA-2014-0333 No score

Updated 389-ds-base packages fix security vulnerability

It was found that when replication was enabled for each attribute in 389 Directory Server, which is the default configuration, the server returned replicated metadata when the directory was searched while debugging was enabled. A remote attacker could use this flaw to disclose potentially sensitive information (CVE-2014-3562).

The 389-ds-base package has been updated to version 1.3.2.22, fixing this issue and other bugs.

Record: MGASA-2014-0333
Updated: 2026-11-02

OSVUBUNTU-CVE-2014-3562 No score

Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory.

Record: UBUNTU-CVE-2014-3562
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`389-ds-base` Debian:12	before 1.3.2.21-1	1.3.2.21-1
`389-ds-base` Debian:13	before 1.3.2.21-1	1.3.2.21-1
`389-ds-base` Mageia:3	before 1.3.2.22-1.mga3	1.3.2.22-1.mga3
`389-ds-base` Mageia:4	before 1.3.2.22-1.mga4	1.3.2.22-1.mga4
`389-ds-base` Red Hat:enterprise_linux:6::client	before 0:1.2.11.15-34.el6_5	0:1.2.11.15-34.el6_5
`389-ds-base-debuginfo` Red Hat:enterprise_linux:6::client	before 0:1.2.11.15-34.el6_5	0:1.2.11.15-34.el6_5
`389-ds-base-devel` Red Hat:enterprise_linux:6::client	before 0:1.2.11.15-34.el6_5	0:1.2.11.15-34.el6_5
`389-ds-base-libs` Red Hat:enterprise_linux:6::client	before 0:1.2.11.15-34.el6_5	0:1.2.11.15-34.el6_5
`389-ds-base` Red Hat:enterprise_linux:6::computenode	before 0:1.2.11.15-34.el6_5	0:1.2.11.15-34.el6_5
`389-ds-base-debuginfo` Red Hat:enterprise_linux:6::computenode	before 0:1.2.11.15-34.el6_5	0:1.2.11.15-34.el6_5

Show 29 moreShow less

Affected packages
Package	Affected	Fixed
`389-ds-base-devel` Red Hat:enterprise_linux:6::computenode	before 0:1.2.11.15-34.el6_5	0:1.2.11.15-34.el6_5
`389-ds-base-libs` Red Hat:enterprise_linux:6::computenode	before 0:1.2.11.15-34.el6_5	0:1.2.11.15-34.el6_5
`389-ds-base` Red Hat:enterprise_linux:6::server	before 0:1.2.11.15-34.el6_5	0:1.2.11.15-34.el6_5
`389-ds-base-debuginfo` Red Hat:enterprise_linux:6::server	before 0:1.2.11.15-34.el6_5	0:1.2.11.15-34.el6_5
`389-ds-base-libs` Red Hat:enterprise_linux:6::server	before 0:1.2.11.15-34.el6_5	0:1.2.11.15-34.el6_5
`389-ds-base-devel` Red Hat:enterprise_linux:6::server	before 0:1.2.11.15-34.el6_5	0:1.2.11.15-34.el6_5
`389-ds-base` Red Hat:enterprise_linux:6::workstation	before 0:1.2.11.15-34.el6_5	0:1.2.11.15-34.el6_5
`389-ds-base-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:1.2.11.15-34.el6_5	0:1.2.11.15-34.el6_5
`389-ds-base-libs` Red Hat:enterprise_linux:6::workstation	before 0:1.2.11.15-34.el6_5	0:1.2.11.15-34.el6_5
`389-ds-base-devel` Red Hat:enterprise_linux:6::workstation	before 0:1.2.11.15-34.el6_5	0:1.2.11.15-34.el6_5
`389-ds-base` Red Hat:enterprise_linux:7::client	before 0:1.3.1.6-26.el7_0	0:1.3.1.6-26.el7_0
`389-ds-base-debuginfo` Red Hat:enterprise_linux:7::client	before 0:1.3.1.6-26.el7_0	0:1.3.1.6-26.el7_0
`389-ds-base-devel` Red Hat:enterprise_linux:7::client	before 0:1.3.1.6-26.el7_0	0:1.3.1.6-26.el7_0
`389-ds-base-libs` Red Hat:enterprise_linux:7::client	before 0:1.3.1.6-26.el7_0	0:1.3.1.6-26.el7_0
`389-ds-base` Red Hat:enterprise_linux:7::computenode	before 0:1.3.1.6-26.el7_0	0:1.3.1.6-26.el7_0
`389-ds-base-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.3.1.6-26.el7_0	0:1.3.1.6-26.el7_0
`389-ds-base-devel` Red Hat:enterprise_linux:7::computenode	before 0:1.3.1.6-26.el7_0	0:1.3.1.6-26.el7_0
`389-ds-base-libs` Red Hat:enterprise_linux:7::computenode	before 0:1.3.1.6-26.el7_0	0:1.3.1.6-26.el7_0
`389-ds-base` Red Hat:enterprise_linux:7::server	before 0:1.3.1.6-26.el7_0	0:1.3.1.6-26.el7_0
`389-ds-base-debuginfo` Red Hat:enterprise_linux:7::server	before 0:1.3.1.6-26.el7_0	0:1.3.1.6-26.el7_0
`389-ds-base-libs` Red Hat:enterprise_linux:7::server	before 0:1.3.1.6-26.el7_0	0:1.3.1.6-26.el7_0
`389-ds-base-devel` Red Hat:enterprise_linux:7::server	before 0:1.3.1.6-26.el7_0	0:1.3.1.6-26.el7_0
`389-ds-base` Red Hat:enterprise_linux:7::workstation	before 0:1.3.1.6-26.el7_0	0:1.3.1.6-26.el7_0
`389-ds-base-debuginfo` Red Hat:enterprise_linux:7::workstation	before 0:1.3.1.6-26.el7_0	0:1.3.1.6-26.el7_0
`389-ds-base-libs` Red Hat:enterprise_linux:7::workstation	before 0:1.3.1.6-26.el7_0	0:1.3.1.6-26.el7_0
`389-ds-base-devel` Red Hat:enterprise_linux:7::workstation	before 0:1.3.1.6-26.el7_0	0:1.3.1.6-26.el7_0
`redhat-ds-base` Red Hat:directory_server:8::el5	before 0:8.2.11-15.el5dsrv	0:8.2.11-15.el5dsrv
`redhat-ds-base-debuginfo` Red Hat:directory_server:8::el5	before 0:8.2.11-15.el5dsrv	0:8.2.11-15.el5dsrv
`redhat-ds-base-devel` Red Hat:directory_server:8::el5	before 0:8.2.11-15.el5dsrv	0:8.2.11-15.el5dsrv

History

History
Recorded	Changed	Sources
Nov 3, 2026	affected
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-3562 is a medium vulnerability (CVSS 5.0) in Fedoraproject 389 Directory Server, published August 18, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.20%, the 82nd percentile. Fixed in 389-ds-base 1.3.2.21-1.

References

Show 10 moreShow less