Vulnérabilités de Red Hat Red Hat Directory Server 12

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-11790	389-ds-base: 389-ds-base: pbkdf2 password storage plugin unbounded iteration count denial of service	4.9 Moyenne	9 juin 2026
CVE-2026-11789	389-ds-base: 389-ds-base: smd5 password storage plugin salt length integer underflow crash	4.9 Moyenne	9 juin 2026
CVE-2026-11787	389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsing	5.0 Moyenne	9 juin 2026
CVE-2026-11788	389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser	5.9 Moyenne	9 juin 2026
CVE-2026-11785	389-ds-base: 389-ds-base: partial stack address information leak via ber_printf type confusion in sso token handler	4.3 Moyenne	9 juin 2026
CVE-2026-11786	A flaw was found in 389 Directory Server	1.9 Faible	9 juin 2026
CVE-2026-11611	389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditions	6.5 Moyenne	8 juin 2026
CVE-2026-9064	389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)	7.5 Élevée	20 mai 2026
CVE-2026-4800	The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same…	8.1 Élevée	31 mars 2026
CVE-2026-33228	flatted is a circular JSON parser	8.9 Élevée	20 mars 2026
CVE-2026-32141	flatted is a circular JSON parser	7.5 Élevée	12 mars 2026
CVE-2025-14905	389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow	7.2 Élevée	23 févr. 2026
CVE-2025-69873	ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the…	2.9 Faible	11 févr. 2026
CVE-2025-13465	The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution	6.9 Moyenne	21 janv. 2026
CVE-2025-4574	Crossbeam-channel: crossbeam-channel vulnerable to double free on drop	6.5 Moyenne	13 mai 2025
CVE-2025-3416	A flaw was found in OpenSSL's handling of the properties argument in certain functions	3.7 Faible	8 avr. 2025
CVE-2025-2487	389-ds-base: null pointer dereference leads to denial of service	4.9 Moyenne	18 mars 2025
CVE-2024-8445	389-ds-base: server crash while modifying `userpassword` using malformed input (incomplete fix for cve-2024-2199)	5.7 Moyenne	5 sept. 2024
CVE-2024-1062	389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)	5.5 Moyenne	12 févr. 2024

Autres produits Red Hat