Advisories · Technology
Red Hat Directory Server 12.4 for RHEL 9.
Every CVE that names Red Hat Directory Server 12.4 for RHEL 9 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request
- Red Hat Directory Server 12.4 for RHEL 9
- Red Hat Enterprise Linux 9
- CWE-230
- CVSS 5.7 Medium
389-ds-base: malformed userpassword hash may cause denial of service
- Red Hat Directory Server 11.5 E4S for RHEL 8
- Red Hat Directory Server 11.7 for RHEL 8
- CWE-1288
- CVSS 7.5 High
389-ds-base: potential denial of service via specially crafted kerberos as-req request
- Red Hat Directory Server 11.5 E4S for RHEL 8
- Red Hat Directory Server 11.7 for RHEL 8
- CWE-20
- CVSS 5.7 Medium
389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c
- Red Hat Directory Server 11.5 E4S for RHEL 8
- Red Hat Directory Server 11.8 for RHEL 8
- CWE-20