Red Hat Directory Server 12.

389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of service

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Memory corruption

389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• CWE-923

389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Denial of service

389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.7 E4S for RHEL 8
• Command injection

389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

389-ds-base: 389-ds-base: pre-authentication double-free in get_ldapmessage_controls_ext() via critical session tracking control

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Memory corruption

389-ds-base: 389-ds-base: missing authorization allows anonymous clients to start or abort cleanallruv replication maintenance

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Broken access control

389-ds-base: 389-ds-base: sasl plain bind installs connection credentials before account-lock check, allowing continued access as a locked account

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Authentication bypass

389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.7 E4S for RHEL 8
• Other injection

389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.7 E4S for RHEL 8
• Memory corruption

389-ds-base: 389-ds-base: heap-buffer-overflow in rdn_av_swap on quoted multivalued rdn

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• CWE-1220

389-ds-base: 389-ds-base: non-constant-time comparison in pbkdf2-sha256 password verification

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• CWE-208

389-ds-base: 389-ds-base: static initialization vector in aes-cbc/3des-cbc attribute encryption

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• CWE-329

389-ds-base: 389-ds-base: heap-buffer-overflow in dn normalization via quoted multivalued rdn

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Memory corruption

389-ds-base: 389-ds-base: use-after-free in schema reload via attr_syntax_swap_ht()

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Memory corruption

389-ds-base: 389-ds-base: heap-buffer-overflows in __aclp__normalize_acltxt()

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Memory corruption

389-ds-base: 389-ds-base: heap buffer overflow in schema objectclass serialization due to missing oc_superior in size calculation

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Memory corruption

389-ds-base: 389-ds-base: heap buffer overflow in audit log password masking (create_masked_entry_string)

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Memory corruption

389-ds-base: 389-ds-base: stack buffer overflow in checkprefix() algorithm id parsing

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Memory corruption

389-ds-base: 389-ds-base: pbkdf2 password storage plugin unbounded iteration count denial of service

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Denial of service

389-ds-base: 389-ds-base: smd5 password storage plugin salt length integer underflow crash

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Memory corruption

389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.7 E4S for RHEL 8
• Memory corruption

389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsing

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• CWE-126

389-ds-base: 389-ds-base: partial stack address information leak via ber_printf type confusion in sso token handler

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Memory corruption

389-ds-base: 389-ds-base: heap out-of-bounds read in ldif parser str2entry_state_information_from_type()

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Memory corruption

389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditions

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Denial of service

Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Memory corruption

389-ds-base: null pointer dereference leads to denial of service

• Red Hat Directory Server 12.4 EUS for RHEL 9
• Red Hat Enterprise Linux 9
• Memory corruption

389-ds-base: server crash while modifying `userpassword` using malformed input (incomplete fix for cve-2024-2199)

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Directory Server 11
• CWE-20

389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.7 for RHEL 8
• Memory corruption