Поиск уязвимостей
Количество 13
Количество 13
CVE-2026-15722
A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP server by sending a crafted StartNSDS50ReplicationRequest extended operation containing a replica ID field with more than 16 digit characters. The overflow occurs during payload decoding, before any authorization check. Stack protectors limit impact to denial of service.
CVE-2026-15722
A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP server by sending a crafted StartNSDS50ReplicationRequest extended operation containing a replica ID field with more than 16 digit characters. The overflow occurs during payload decoding, before any authorization check. Stack protectors limit impact to denial of service.
CVE-2026-15722
A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP server by sending a crafted StartNSDS50ReplicationRequest extended operation containing a replica ID field with more than 16 digit characters. The overflow occurs during payload decoding, before any authorization check. Stack protectors limit impact to denial of service.
CVE-2026-15722
A stack buffer overflow flaw was found in 389 Directory Server (389-ds ...
GHSA-5gg4-m865-6qwr
A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP server by sending a crafted StartNSDS50ReplicationRequest extended operation containing a replica ID field with more than 16 digit characters. The overflow occurs during payload decoding, before any authorization check. Stack protectors limit impact to denial of service.
RLSA-2026:55530
Important: 389-ds:1.4 security update
RLSA-2026:55424
Important: 389-ds-base security update
RLSA-2026:55423
Important: 389-ds-base security update
ELSA-2026-55758
ELSA-2026-55758: 389-ds-base security update (IMPORTANT)
ELSA-2026-55530
ELSA-2026-55530: 389-ds:1.4 security update (IMPORTANT)
ELSA-2026-55424
ELSA-2026-55424: 389-ds-base security update (IMPORTANT)
ELSA-2026-55423
ELSA-2026-55423: 389-ds-base security update (IMPORTANT)
ALT-PU-2026-14987
ALT-PU-2026-14987: package `389-ds-base` update to version 3.1.5-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-15722 A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP server by sending a crafted StartNSDS50ReplicationRequest extended operation containing a replica ID field with more than 16 digit characters. The overflow occurs during payload decoding, before any authorization check. Stack protectors limit impact to denial of service. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
 | CVE-2026-15722 A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP server by sending a crafted StartNSDS50ReplicationRequest extended operation containing a replica ID field with more than 16 digit characters. The overflow occurs during payload decoding, before any authorization check. Stack protectors limit impact to denial of service. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
 | CVE-2026-15722 A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP server by sending a crafted StartNSDS50ReplicationRequest extended operation containing a replica ID field with more than 16 digit characters. The overflow occurs during payload decoding, before any authorization check. Stack protectors limit impact to denial of service. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
| CVE-2026-15722 A stack buffer overflow flaw was found in 389 Directory Server (389-ds ... | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
| GHSA-5gg4-m865-6qwr A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP server by sending a crafted StartNSDS50ReplicationRequest extended operation containing a replica ID field with more than 16 digit characters. The overflow occurs during payload decoding, before any authorization check. Stack protectors limit impact to denial of service. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
 | RLSA-2026:55530 Important: 389-ds:1.4 security update | 3 месяца назад | ||
| RLSA-2026:55424 Important: 389-ds-base security update | 3 месяца назад | ||
| RLSA-2026:55423 Important: 389-ds-base security update | 3 месяца назад | ||
| ELSA-2026-55758 ELSA-2026-55758: 389-ds-base security update (IMPORTANT) | около 2 месяцев назад | ||
| ELSA-2026-55530 ELSA-2026-55530: 389-ds:1.4 security update (IMPORTANT) | 3 месяца назад | ||
| ELSA-2026-55424 ELSA-2026-55424: 389-ds-base security update (IMPORTANT) | 3 месяца назад | ||
| ELSA-2026-55423 ELSA-2026-55423: 389-ds-base security update (IMPORTANT) | 3 месяца назад | ||
| ALT-PU-2026-14987 ALT-PU-2026-14987: package `389-ds-base` update to version 3.1.5-alt1 | CVSS3: 9.8 | около 2 месяцев назад |
Уязвимостей на страницу