Поиск уязвимостей
Количество 33
Количество 33
CVE-2026-11788
A flaw was found in 389 Directory Server. The dereference control plug ...
openSUSE-SU-2026:21950-1
Security update for 389-ds
SUSE-SU-2026:4380-1
Security update for 389-ds
GHSA-5gg4-m865-6qwr
A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP server by sending a crafted StartNSDS50ReplicationRequest extended operation containing a replica ID field with more than 16 digit characters. The overflow occurs during payload decoding, before any authorization check. Stack protectors limit impact to denial of service.
ROS-20260922-80-0138
Уязвимость 389-ds-base
ROS-20260922-73-0108
Уязвимость 389-ds-base
GHSA-x2wj-4r98-4867
A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure.
SUSE-SU-2026:4932-1
Security update for 389-ds
SUSE-SU-2026:4929-1
Security update for 389-ds
openSUSE-SU-2026:21691-1
Security update for 389-ds
SUSE-SU-2026:3138-1
Security update for 389-ds
SUSE-SU-2026:3137-1
Security update for 389-ds
SUSE-SU-2026:3136-1
Security update for 389-ds
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| CVE-2026-11788 A flaw was found in 389 Directory Server. The dereference control plug ... | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
 | openSUSE-SU-2026:21950-1 Security update for 389-ds | около 2 месяцев назад | ||
| SUSE-SU-2026:4380-1 Security update for 389-ds | около 1 месяца назад | ||
| GHSA-5gg4-m865-6qwr A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP server by sending a crafted StartNSDS50ReplicationRequest extended operation containing a replica ID field with more than 16 digit characters. The overflow occurs during payload decoding, before any authorization check. Stack protectors limit impact to denial of service. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
 | ROS-20260922-80-0138 Уязвимость 389-ds-base | CVSS3: 7.5 | 1% Низкий | около 2 месяцев назад |
| ROS-20260922-73-0108 Уязвимость 389-ds-base | CVSS3: 7.5 | 1% Низкий | около 2 месяцев назад |
| GHSA-x2wj-4r98-4867 A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure. | CVSS3: 5.9 | 1% Низкий | 5 месяцев назад |
| SUSE-SU-2026:4932-1 Security update for 389-ds | 11 дней назад | ||
| SUSE-SU-2026:4929-1 Security update for 389-ds | 11 дней назад | ||
| openSUSE-SU-2026:21691-1 Security update for 389-ds | 2 месяца назад | ||
| SUSE-SU-2026:3138-1 Security update for 389-ds | 4 месяца назад | ||
| SUSE-SU-2026:3137-1 Security update for 389-ds | 4 месяца назад | ||
| SUSE-SU-2026:3136-1 Security update for 389-ds | 4 месяца назад |
Уязвимостей на страницу