Product by Red Hat
Red Hat 389 Directory Server (389-ds-base)
47 known vulnerabilities in Red Hat 389 Directory Server (389-ds-base) (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
47
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2018-14648 | Fedora Project 389 Directory Server: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2018-1054 | Red Hat 389-ds-base: Classic Buffer Overflow | 7.5 | |
| High | CVE-2018-1089 | 389-ds-base: Heap-based Buffer Overflow | 7.5 | |
| High | CVE-2016-0741 | Fedora Project 389 Directory Server: Infinite Loop | 7.5 | |
| High | CVE-2017-15134 | Red Hat 389-ds-base: Classic Buffer Overflow | 7.5 | |
| High | CVE-2019-3883 | Red Hat 389-ds-base: Missing Release of Resource after Effective Lifetime | 5.3 | |
| High | CVE-2018-14638 | Fedora Project 389-ds-base: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2018-14624 | 389-ds-base: Improper Input Validation | 7.5 | |
| Medium | CVE-2017-2668 | 389-ds-base: Improper Restriction of Operations within the Bounds of a Memory Buffer | 6.5 | |
| High | CVE-2026-15722 | Red Hat: Stack-based Buffer Overflow | 7.5 | |
| High | CVE-2022-1949 | 389-ds-base: security vulnerability | 7.5 | |
| Medium | CVE-2018-10935 | Red Hat 389 Directory Server (389-ds-base): Uncontrolled Resource Consumption | 6.5 | |
| High | CVE-2026-9064 | 389-ds-base: Allocation of Resources Without Limits or Throttling | 7.5 | |
| High | CVE-2019-10171 | Red Hat 389-ds-base: Allocation of Resources Without Limits or Throttling | 7.5 | |
| High | CVE-2010-2222 | Red Hat Directory Server: NULL Pointer Dereference | 7.5 | |
| High | CVE-2017-2591 | 389-ds-base: Heap-based Buffer Overflow | 3.7 | |
| Medium | CVE-2022-0996 | 389-ds-base: Improper Authentication | 6.5 | |
| High | CVE-2026-11770 | 389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check | 7.5 | |
| Medium | CVE-2018-10850 | 389-ds-base: Race Condition | 5.9 | |
| Medium | CVE-2019-14824 | Fedora Project 389 Directory Server: Incorrect Permission Assignment for Critical Resource | 6.5 | |
| Medium | CVE-2020-35518 | 389-ds-base: Exposure of Sensitive Information to an Unauthorized Actor | 5.3 | |
| Medium | CVE-2021-3514 | 389-ds-base: NULL Pointer Dereference | 6.5 | |
| Medium | CVE-2024-6237 | 389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request | 6.5 | |
| High | CVE-2026-11788 | 389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser | 5.9 | |
| Medium | CVE-2026-14940 | 389-ds-base: 389-ds-base: heap-buffer-overflow in dn normalization via quoted multivalued rdn | 5.3 |