Vulnerabilities of Red Hat Red Hat Directory Server 12

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-11790	389-ds-base: 389-ds-base: pbkdf2 password storage plugin unbounded iteration count denial of service	4.9 Medium	Jun 9, 2026
CVE-2026-11789	389-ds-base: 389-ds-base: smd5 password storage plugin salt length integer underflow crash	4.9 Medium	Jun 9, 2026
CVE-2026-11787	389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsing	5.0 Medium	Jun 9, 2026
CVE-2026-11788	389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser	5.9 Medium	Jun 9, 2026
CVE-2026-11785	389-ds-base: 389-ds-base: partial stack address information leak via ber_printf type confusion in sso token handler	4.3 Medium	Jun 9, 2026
CVE-2026-11786	A flaw was found in 389 Directory Server	1.9 Low	Jun 9, 2026
CVE-2026-11611	389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditions	6.5 Medium	Jun 8, 2026
CVE-2026-9064	389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)	7.5 High	May 20, 2026
CVE-2026-4800	The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same…	8.1 High	Mar 31, 2026
CVE-2026-33228	flatted is a circular JSON parser	8.9 High	Mar 20, 2026
CVE-2026-32141	flatted is a circular JSON parser	7.5 High	Mar 12, 2026
CVE-2025-14905	389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow	7.2 High	Feb 23, 2026
CVE-2025-69873	ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the…	2.9 Low	Feb 11, 2026
CVE-2025-13465	The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution	6.9 Medium	Jan 21, 2026
CVE-2025-4574	Crossbeam-channel: crossbeam-channel vulnerable to double free on drop	6.5 Medium	May 13, 2025
CVE-2025-3416	A flaw was found in OpenSSL's handling of the properties argument in certain functions	3.7 Low	Apr 8, 2025
CVE-2025-2487	389-ds-base: null pointer dereference leads to denial of service	4.9 Medium	Mar 18, 2025
CVE-2024-8445	389-ds-base: server crash while modifying `userpassword` using malformed input (incomplete fix for cve-2024-2199)	5.7 Medium	Sep 5, 2024
CVE-2024-1062	389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)	5.5 Medium	Feb 12, 2024

Other Red Hat products