Product by Red Hat

    Red Hat Directory Server 11.5 E4s For Rhel 8

    16 known vulnerabilities in Red Hat Directory Server 11.5 E4s For Rhel 8 (Red Hat), 0 of them actively exploited (CISA KEV).

    Key figures

    16

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Red Hat Directory Server 11.5 E4s For Rhel 8 (Red Hat)
    HighCVE-2025-14905

    389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow

    also in 24 other products

    		7.2
    CriticalCVE-2026-18922

    Red Hat: Improper Authentication

    also in 23 other products

    		9.8
    HighCVE-2026-18355

    Red Hat: Integer Underflow (Wrap or Wraparound)

    also in 24 other products

    		7.5
    HighCVE-2026-18453

    Red Hat: NULL Pointer Dereference

    also in 24 other products

    		7.5
    HighCVE-2026-15722

    Red Hat: Stack-based Buffer Overflow

    also in 25 other products

    		7.5
    HighCVE-2024-3657

    389-ds-base: potential denial of service via specially crafted kerberos as-req request

    also in 13 other products

    		7.5
    HighCVE-2026-19843

    389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor

    also in 12 other products

    		8.4
    HighCVE-2026-9064

    389-ds-base: Allocation of Resources Without Limits or Throttling

    also in 26 other products

    		7.5
    HighCVE-2026-76560

    389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn

    also in 25 other products

    		7.5
    HighCVE-2026-11774

    Red Hat: Integer Overflow or Wraparound

    also in 23 other products

    		7.6
    HighCVE-2026-11610

    389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbind

    also in 23 other products

    		8.8
    HighCVE-2026-11770

    389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check

    also in 25 other products

    		7.5
    HighCVE-2026-11788

    389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser

    also in 25 other products

    		5.9
    MediumCVE-2024-5953

    389-ds-base: malformed userpassword hash may cause denial of service

    also in 12 other products

    		5.7
    MediumCVE-2024-2199

    389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c

    also in 10 other products

    		5.7
    MediumCVE-2024-1062

    389-ds-base: Heap-based Buffer Overflow

    also in 24 other products

    		5.5

    All products by Red Hat