Skip to content

Fedoraproject 389 Directory Server vulnerabilities

fedoraproject 389 directory server, hp hp-ux directory server, redhat directory server +2 more 389 Directory Server before 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server... CVE-2010-3282 3.3 LowJanuary 9, 2020
red hat 389-ds-base, fedoraproject 389 directory server +1 more A flaw has been found in 389-ds-base versions 1.4.x.x before 1.4.1.3. When executed in verbose... CVE-2019-10224 Fix available 4.3 MediumNovember 25, 2019
[unknown] 389-ds-base, debian linux, fedoraproject 389 directory server +1 more +3 more A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission... CVE-2019-14824 Fix available 6.5 MediumNovember 8, 2019
redhat 389-ds-base, fedoraproject 389 directory server, redhat enterprise linux server eus +2 more It was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17,... CVE-2019-10171 Fix available 7.5 HighAugust 2, 2019
red hat 389-ds-base, debian linux, fedoraproject 389 directory server +1 more +3 more In 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will... CVE-2019-3883 Fix available 5.3 MediumApril 17, 2019
fedoraproject 389 directory server, [unknown] 389-ds-base:, debian linux +1 more +3 more A flaw was found in 389 Directory Server. A specially crafted search query could lead to... CVE-2018-14648 Fix available 7.5 HighSeptember 28, 2018
fedora project 389-ds-base, fedoraproject 389 directory server, redhat enterprise linux aus +5 more +7 more A flaw was found in 389-ds-base before version 1.3.8.4-13. The process ns-slapd crashes in... CVE-2018-14638 Fix available 7.5 HighSeptember 14, 2018
[unknown] 389-ds-base, debian linux, fedoraproject 389 directory server +6 more +8 more A vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16.... CVE-2018-14624 Fix available 7.5 HighSeptember 6, 2018
[unknown] 389-ds-base, debian linux, fedoraproject 389 directory server +2 more 389-ds-base before versions 1.3.8.5, 1.4.0.12 is vulnerable to a Cleartext Storage of Sensitive... CVE-2018-10871 Fix available 3.8 LowJuly 18, 2018
[unknown] 389-ds-base, debian linux, fedoraproject 389 directory server +7 more +9 more 389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds... CVE-2018-10850 Fix available 5.9 MediumJune 13, 2018
unspecified 389-ds-base, debian linux, fedoraproject 389 directory server +3 more +5 more 389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search... CVE-2018-1089 Fix available 7.5 HighMay 9, 2018
fedoraproject 389 directory server 389 Directory Server 1.2.7.5, when built with mozldap, allows remote attackers to cause a denial... CVE-2011-0704 5.9 MediumMay 4, 2018
red hat, inc. 389-ds-base, fedoraproject 389 directory server, redhat enterprise linux desktop +2 more +4 more An out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search... CVE-2018-1054 Fix available 7.5 HighMarch 7, 2018
red hat, inc. 389-ds-base, fedoraproject 389 directory server, redhat enterprise linux +3 more +5 more A stack buffer overflow flaw was found in the way 389-ds-base 1.3.6.x before 1.3.6.13, 1.3.7.x... CVE-2017-15134 Fix available 7.5 HighFebruary 8, 2018
red hat, inc. 389-ds-base, fedoraproject 389 directory server +1 more It was found that 389-ds-base since 1.3.6.1 up to and including 1.4.0.3 did not always handle... CVE-2017-15135 Fix available 8.1 HighJanuary 24, 2018
389 directory server 389-ds-base, fedoraproject 389 directory server +1 more 389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks... CVE-2017-7551 Fix available 9.8 CriticalAugust 16, 2017
[unknown] 389-ds-base, fedoraproject 389 directory server, redhat enterprise linux desktop +2 more +4 more 389-ds-base before versions 1.3.5.17 and 1.3.6.10 is vulnerable to an invalid pointer dereference... CVE-2017-2668 Fix available 6.5 MediumMay 2, 2017
fedoraproject 389 directory server, unspecified 389-ds-base, redhat enterprise linux +2 more 389-ds-base before version 1.3.6 is vulnerable to an improperly NULL terminated array in the... CVE-2017-2591 Fix available 3.7 LowJanuary 27, 2017
fedoraproject 389 directory server, redhat enterprise linux, enterprise linux desktop +3 more +5 more slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3... CVE-2016-0741 Fix available 7.5 HighFebruary 23, 2016
fedoraproject 389 directory server 389 Directory Server (formerly Fedora Directory Server) before 1.3.3.12 does not enforce the... CVE-2015-3230 Fix available 7.5 HighOctober 15, 2015
fedoraproject 389 directory server, debian linux, fedoraproject fedora +2 more 389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and... CVE-2015-1854 Fix available 7.5 HighMay 3, 2015
fedoraproject 389 directory server, fedora +1 more 389 Directory Server 1.3.1.x, 1.3.2.x before 1.3.2.27, and 1.3.3.x before 1.3.3.9 stores ... CVE-2014-8112 Fix available 4.0 MediumMarch 10, 2015
fedoraproject 389 directory server, fedora +1 more 389 Directory Server before 1.3.2.27 and 1.3.3.x before 1.3.3.9 does not properly restrict access... CVE-2014-8105 Fix available 5.0 MediumMarch 10, 2015
fedoraproject 389 directory server, redhat directory server, enterprise linux +2 more Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote... CVE-2014-3562 Fix available 5.0 MediumAugust 18, 2014
fedoraproject 389 directory server The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote... CVE-2014-0132 Fix available 6.5 MediumMarch 18, 2014
fedoraproject 389 directory server, redhat directory server, enterprise linux +2 more 389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote... CVE-2013-4485 Fix available 4.0 MediumNovember 23, 2013
fedoraproject 389 directory server ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of... CVE-2013-4283 Fix available 5.0 MediumAugust 30, 2013
fedoraproject 389 directory server, redhat directory server +1 more The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict... CVE-2013-2219 Fix available 4.0 MediumJuly 31, 2013
fedoraproject 389 directory server The do_search function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11... CVE-2013-1897 Fix available 2.6 LowMay 13, 2013
fedoraproject 389 directory server 389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service (crash)... CVE-2013-0312 Fix available 5.0 MediumMarch 13, 2013
fedoraproject 389 directory server 389 Directory Server 1.2.10 does not properly update the ACL when a DN entry is moved by a modrdn... CVE-2012-4450 Fix available 6.0 MediumOctober 1, 2012
fedoraproject 389 directory server, redhat directory server +1 more 389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), when the... CVE-2012-2746 2.1 LowJuly 3, 2012
fedoraproject 389 directory server, redhat directory server +1 more 389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the... CVE-2012-2678 1.2 LowJuly 3, 2012
fedoraproject 389 directory server The acllas__handle_group_entry function in servers/plugins/acl/acllas.c in 389 Directory Server... CVE-2012-0833 Fix available 2.3 LowJuly 3, 2012
fedoraproject 389 directory server slapd (aka ns-slapd) in 389 Directory Server before 1.2.8.a2 does not properly manage the... CVE-2011-1067 5.0 MediumFebruary 23, 2011
fedoraproject 389 directory server, redhat directory server +1 more The (1) backup and restore scripts, (2) main initialization script, and (3) ldap-agent script in... CVE-2011-0532 6.2 MediumFebruary 23, 2011
fedoraproject 389 directory server, redhat directory server +1 more The setup scripts in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x), when... CVE-2011-0022 4.7 MediumFebruary 23, 2011
fedoraproject 389 directory server, redhat directory server +1 more slapd (aka ns-slapd) in 389 Directory Server 1.2.7.5 (aka Red Hat Directory Server 8.2.x or... CVE-2011-0019 7.5 HighFebruary 23, 2011
fedoraproject 389 directory server Multiple memory leaks in the normalization functionality in 389 Directory Server before 1.2.7.5... CVE-2010-4746 5.0 MediumFebruary 23, 2011