Поиск уязвимостей
Количество 21
Количество 21
BDU:2026-12878
Уязвимость сервера службы каталогов 389 Directory Server, связанная с выделением неограниченной памяти, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260921-80-0127
Уязвимость 389-ds-base
ROS-20260921-73-0104
Уязвимость 389-ds-base
ALT-PU-2026-14987
ALT-PU-2026-14987: package `389-ds-base` update to version 3.1.5-alt1
CVE-2026-9064
A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function in the LDAP server does not enforce an upper bound on the number of controls per LDAP message. A remote, unauthenticated attacker can send a specially crafted LDAP request containing hundreds of thousands of minimal controls within the default maximum BER message size (2 MB), causing excessive CPU consumption and heap allocation on the server. Under concurrent exploitation, this leads to significant latency degradation, worker thread starvation, or out-of-memory termination, resulting in a denial of service.
CVE-2026-9064
A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function in the LDAP server does not enforce an upper bound on the number of controls per LDAP message. A remote, unauthenticated attacker can send a specially crafted LDAP request containing hundreds of thousands of minimal controls within the default maximum BER message size (2 MB), causing excessive CPU consumption and heap allocation on the server. Under concurrent exploitation, this leads to significant latency degradation, worker thread starvation, or out-of-memory termination, resulting in a denial of service.
CVE-2026-9064
A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function in the LDAP server does not enforce an upper bound on the number of controls per LDAP message. A remote, unauthenticated attacker can send a specially crafted LDAP request containing hundreds of thousands of minimal controls within the default maximum BER message size (2 MB), causing excessive CPU consumption and heap allocation on the server. Under concurrent exploitation, this leads to significant latency degradation, worker thread starvation, or out-of-memory termination, resulting in a denial of service.
CVE-2026-9064
A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() fu ...
openSUSE-SU-2026:21011-1
Security update for 389-ds
SUSE-SU-2026:2419-1
Security update for 389-ds
SUSE-SU-2026:2418-1
Security update for 389-ds
SUSE-SU-2026:2417-1
Security update for 389-ds
SUSE-SU-2026:2316-1
Security update for 389-ds
RLSA-2026:26459
Important: 389-ds:1.4 security update
RLSA-2026:26456
Important: 389-ds-base security, bug fix, and enhancement update
RLSA-2026:26455
Important: 389-ds-base security, bug fix, and enhancement update
GHSA-7r3c-wfgh-x96c
A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function in the LDAP server does not enforce an upper bound on the number of controls per LDAP message. A remote, unauthenticated attacker can send a specially crafted LDAP request containing hundreds of thousands of minimal controls within the default maximum BER message size (2 MB), causing excessive CPU consumption and heap allocation on the server. Under concurrent exploitation, this leads to significant latency degradation, worker thread starvation, or out-of-memory termination, resulting in a denial of service.
ELSA-2026-26459
ELSA-2026-26459: 389-ds:1.4 security update (IMPORTANT)
ELSA-2026-26456
ELSA-2026-26456: 389-ds-base security, bug fix, and enhancement update (IMPORTANT)
ELSA-2026-26455
ELSA-2026-26455: 389-ds-base security, bug fix, and enhancement update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-12878 Уязвимость сервера службы каталогов 389 Directory Server, связанная с выделением неограниченной памяти, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
 | ROS-20260921-80-0127 Уязвимость 389-ds-base | CVSS3: 7.5 | 1% Низкий | около 2 месяцев назад |
| ROS-20260921-73-0104 Уязвимость 389-ds-base | CVSS3: 7.5 | 1% Низкий | около 2 месяцев назад |
| ALT-PU-2026-14987 ALT-PU-2026-14987: package `389-ds-base` update to version 3.1.5-alt1 | CVSS3: 9.8 | около 2 месяцев назад | |
 | CVE-2026-9064 A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function in the LDAP server does not enforce an upper bound on the number of controls per LDAP message. A remote, unauthenticated attacker can send a specially crafted LDAP request containing hundreds of thousands of minimal controls within the default maximum BER message size (2 MB), causing excessive CPU consumption and heap allocation on the server. Under concurrent exploitation, this leads to significant latency degradation, worker thread starvation, or out-of-memory termination, resulting in a denial of service. | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
 | CVE-2026-9064 A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function in the LDAP server does not enforce an upper bound on the number of controls per LDAP message. A remote, unauthenticated attacker can send a specially crafted LDAP request containing hundreds of thousands of minimal controls within the default maximum BER message size (2 MB), causing excessive CPU consumption and heap allocation on the server. Under concurrent exploitation, this leads to significant latency degradation, worker thread starvation, or out-of-memory termination, resulting in a denial of service. | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
 | CVE-2026-9064 A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function in the LDAP server does not enforce an upper bound on the number of controls per LDAP message. A remote, unauthenticated attacker can send a specially crafted LDAP request containing hundreds of thousands of minimal controls within the default maximum BER message size (2 MB), causing excessive CPU consumption and heap allocation on the server. Under concurrent exploitation, this leads to significant latency degradation, worker thread starvation, or out-of-memory termination, resulting in a denial of service. | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
| CVE-2026-9064 A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() fu ... | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
 | openSUSE-SU-2026:21011-1 Security update for 389-ds | 1% Низкий | 5 месяцев назад | |
| SUSE-SU-2026:2419-1 Security update for 389-ds | 1% Низкий | 5 месяцев назад | |
| SUSE-SU-2026:2418-1 Security update for 389-ds | 1% Низкий | 5 месяцев назад | |
| SUSE-SU-2026:2417-1 Security update for 389-ds | 1% Низкий | 5 месяцев назад | |
| SUSE-SU-2026:2316-1 Security update for 389-ds | 1% Низкий | 5 месяцев назад | |
 | RLSA-2026:26459 Important: 389-ds:1.4 security update | 1% Низкий | 5 месяцев назад | |
| RLSA-2026:26456 Important: 389-ds-base security, bug fix, and enhancement update | 1% Низкий | 5 месяцев назад | |
| RLSA-2026:26455 Important: 389-ds-base security, bug fix, and enhancement update | 1% Низкий | 5 месяцев назад | |
| GHSA-7r3c-wfgh-x96c A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function in the LDAP server does not enforce an upper bound on the number of controls per LDAP message. A remote, unauthenticated attacker can send a specially crafted LDAP request containing hundreds of thousands of minimal controls within the default maximum BER message size (2 MB), causing excessive CPU consumption and heap allocation on the server. Under concurrent exploitation, this leads to significant latency degradation, worker thread starvation, or out-of-memory termination, resulting in a denial of service. | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
| ELSA-2026-26459 ELSA-2026-26459: 389-ds:1.4 security update (IMPORTANT) | 1% Низкий | 5 месяцев назад | |
| ELSA-2026-26456 ELSA-2026-26456: 389-ds-base security, bug fix, and enhancement update (IMPORTANT) | 1% Низкий | 4 месяца назад | |
| ELSA-2026-26455 ELSA-2026-26455: 389-ds-base security, bug fix, and enhancement update (IMPORTANT) | 1% Низкий | 5 месяцев назад |
Уязвимостей на страницу