agentprime: red-hat-directory-server-13Every new CVE for red-hat-directory-server-13.https://agentprime.io/CVE-2026-117548: 389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of servicehttps://agentprime.io/advisories/CVE-2026-117548/https://agentprime.io/advisories/CVE-2026-117548/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 06:22:06 GMTCVECVE-2026-86345: 389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication resulthttps://agentprime.io/advisories/CVE-2026-86345/https://agentprime.io/advisories/CVE-2026-86345/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 23:27:47 GMTCVEcriticalCVE-2026-86344: 389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeuehttps://agentprime.io/advisories/CVE-2026-86344/https://agentprime.io/advisories/CVE-2026-86344/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 21:29:55 GMTCVECVE-2026-78701: 389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall doshttps://agentprime.io/advisories/CVE-2026-78701/https://agentprime.io/advisories/CVE-2026-78701/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 07:33:02 GMTCVECVE-2026-18663: 389-ds-base: 389-ds-base: pre-authentication double-free in get_ldapmessage_controls_ext() via critical session tracking controlhttps://agentprime.io/advisories/CVE-2026-18663/https://agentprime.io/advisories/CVE-2026-18663/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 09:35:26 GMTCVECVE-2026-19404: 389-ds-base: 389-ds-base: missing authorization allows anonymous clients to start or abort cleanallruv replication maintenancehttps://agentprime.io/advisories/CVE-2026-19404/https://agentprime.io/advisories/CVE-2026-19404/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 09:38:10 GMTCVECVE-2026-18651: 389-ds-base: 389-ds-base: sasl plain bind installs connection credentials before account-lock check, allowing continued access as a locked accounthttps://agentprime.io/advisories/CVE-2026-18651/https://agentprime.io/advisories/CVE-2026-18651/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 14:55:33 GMTCVECVE-2026-16560: 389-ds-base: 389-ds-base: heap-buffer-overflow in rdn_av_swap on quoted multivalued rdnhttps://agentprime.io/advisories/CVE-2026-16560/https://agentprime.io/advisories/CVE-2026-16560/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 12:51:43 GMTCVECVE-2026-15041: 389-ds-base: 389-ds-base: non-constant-time comparison in pbkdf2-sha256 password verificationhttps://agentprime.io/advisories/CVE-2026-15041/https://agentprime.io/advisories/CVE-2026-15041/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jul 2026 10:15:30 GMTCVECVE-2026-14969: 389-ds-base: 389-ds-base: static initialization vector in aes-cbc/3des-cbc attribute encryptionhttps://agentprime.io/advisories/CVE-2026-14969/https://agentprime.io/advisories/CVE-2026-14969/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 15:48:04 GMTCVECVE-2026-14940: 389-ds-base: 389-ds-base: heap-buffer-overflow in dn normalization via quoted multivalued rdnhttps://agentprime.io/advisories/CVE-2026-14940/https://agentprime.io/advisories/CVE-2026-14940/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 13:54:20 GMTCVECVE-2026-11791: 389-ds-base: 389-ds-base: use-after-free in schema reload via attr_syntax_swap_ht()https://agentprime.io/advisories/CVE-2026-11791/https://agentprime.io/advisories/CVE-2026-11791/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jun 2026 14:44:32 GMTCVECVE-2026-12528: 389-ds-base: 389-ds-base: heap-buffer-overflows in __aclp__normalize_acltxt()https://agentprime.io/advisories/CVE-2026-12528/https://agentprime.io/advisories/CVE-2026-12528/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Jun 2026 14:27:27 GMTCVECVE-2026-11884: 389-ds-base: 389-ds-base: heap buffer overflow in schema objectclass serialization due to missing oc_superior in size calculationhttps://agentprime.io/advisories/CVE-2026-11884/https://agentprime.io/advisories/CVE-2026-11884/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jun 2026 14:07:13 GMTCVECVE-2026-11792: 389-ds-base: 389-ds-base: heap buffer overflow in audit log password masking (create_masked_entry_string)https://agentprime.io/advisories/CVE-2026-11792/https://agentprime.io/advisories/CVE-2026-11792/CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 13:11:40 GMTCVECVE-2026-11793: 389-ds-base: 389-ds-base: stack buffer overflow in checkprefix() algorithm id parsinghttps://agentprime.io/advisories/CVE-2026-11793/https://agentprime.io/advisories/CVE-2026-11793/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 13:11:40 GMTCVECVE-2026-11790: 389-ds-base: 389-ds-base: pbkdf2 password storage plugin unbounded iteration count denial of servicehttps://agentprime.io/advisories/CVE-2026-11790/https://agentprime.io/advisories/CVE-2026-11790/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 13:09:29 GMTCVECVE-2026-11789: 389-ds-base: 389-ds-base: smd5 password storage plugin salt length integer underflow crashhttps://agentprime.io/advisories/CVE-2026-11789/https://agentprime.io/advisories/CVE-2026-11789/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 13:02:59 GMTCVECVE-2026-11787: 389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsinghttps://agentprime.io/advisories/CVE-2026-11787/https://agentprime.io/advisories/CVE-2026-11787/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 13:02:53 GMTCVECVE-2026-11785: 389-ds-base: 389-ds-base: partial stack address information leak via ber_printf type confusion in sso token handlerhttps://agentprime.io/advisories/CVE-2026-11785/https://agentprime.io/advisories/CVE-2026-11785/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 12:57:59 GMTCVECVE-2026-11786: 389-ds-base: 389-ds-base: heap out-of-bounds read in ldif parser str2entry_state_information_from_type()https://agentprime.io/advisories/CVE-2026-11786/https://agentprime.io/advisories/CVE-2026-11786/CVSS 1.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 12:57:59 GMTCVECVE-2026-11611: 389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditionshttps://agentprime.io/advisories/CVE-2026-11611/https://agentprime.io/advisories/CVE-2026-11611/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2026 16:17:59 GMTCVE