Skip to content

Vulnerabilities of Red Hat Red Hat Directory Server 13

Is your version affected?

CVE Summary Score Published
CVE-2026-11790 389-ds-base: 389-ds-base: pbkdf2 password storage plugin unbounded iteration count denial of service 4.9 Medium Jun 9, 2026
CVE-2026-11789 389-ds-base: 389-ds-base: smd5 password storage plugin salt length integer underflow crash 4.9 Medium Jun 9, 2026
CVE-2026-11787 389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsing 5.0 Medium Jun 9, 2026
CVE-2026-11788 389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser 5.9 Medium Jun 9, 2026
CVE-2026-11785 389-ds-base: 389-ds-base: partial stack address information leak via ber_printf type confusion in sso token handler 4.3 Medium Jun 9, 2026
CVE-2026-11786 A flaw was found in 389 Directory Server 1.9 Low Jun 9, 2026
CVE-2026-11611 389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditions 6.5 Medium Jun 8, 2026
CVE-2026-9064 389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos) 7.5 High May 20, 2026
CVE-2026-4800 The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same… 8.1 High Mar 31, 2026
CVE-2026-33228 flatted is a circular JSON parser 8.9 High Mar 20, 2026
CVE-2026-32141 flatted is a circular JSON parser 7.5 High Mar 12, 2026
CVE-2025-14905 389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow 7.2 High Feb 23, 2026
CVE-2025-69873 ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the… 2.9 Low Feb 11, 2026
CVE-2025-13465 The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution 6.9 Medium Jan 21, 2026
CVE-2025-56005 An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via… 9.8 Critical Jan 20, 2026

Other Red Hat products