Red Hat

Records7413All Threatist records

Exploited (KEV)98In CISA KEV

CVSS critical792CVSS 9.0–10.0

CVSS high2681CVSS 7.0–8.9

Exploited now

Red Hat records in CISA KEV

TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability CRITICAL 93KEV 2026-10-28 TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2026-35991 Kludex Starlette HTTP Request/Response Smuggling Vulnerability CRITICAL 86KEV 2026-09-02 TI-2015-02874 Red Hat Libuser Race Condition Vulnerability CRITICAL 92KEV 2026-08-26 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-26741 Apache Tomcat Missing Encryption of Sensitive Data Vulnerability CRITICAL 90KEV 2026-08-04

Components

Products in the NVD configurations · select one to filter the records

Enterprise Linux 1956 records CRITICAL Enterprise Linux Desktop 1928 records CRITICAL Enterprise Linux Server 1891 records CRITICAL Enterprise Linux Workstation 1845 records CRITICAL Enterprise Linux Server Aus 1061 records CRITICAL Enterprise Linux Eus 796 records CRITICAL Enterprise Linux Server Tus 770 records CRITICAL Enterprise Linux Server Eus 622 records CRITICAL

Records

42 records in Directory Server · all components

TI-2022-02643 CVE-2022-2850 · GHSA-6c63-4574-7p9f

NULL pointer dereference in 389-ds-base

MEDIUM 62

A flaw was found In 389-ds-base.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0158 Published 2022-10-14 Partial fix CWE-476

TI-2008-00856 CVE-2008-0892 · GHSA-cg2c-3gw3-2vcg

The replication monitor CGI script (repl-monitor-cgi.pl) in Red Hat Administration…

MEDIUM 54

The replication monitor CGI script (repl-monitor-cgi.pl) in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute arbitrary commands.

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.1402 Published 2008-04-16 Fixed CWE-20

TI-2008-02802 CVE-2008-2928 · GHSA-fprm-74q4-pj4w

Multiple buffer overflows in the adminutil library in CGI applications in Red Hat…

MEDIUM 52

Multiple buffer overflows in the adminutil library in CGI applications in Red Hat Directory Server 7.1 before SP7 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06643 Published 2008-08-29 Fixed CWE-119

TI-2008-02804 CVE-2008-2930 · GHSA-622c-3525-jxfp

Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory…

MEDIUM 41

Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 allow remote attackers to cause a denial of service (CPU consumption and search outage) via crafted LDAP search reque…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.06555 Published 2008-08-29 Fixed CWE-399

TI-2008-01608 CVE-2008-1677 · GHSA-qjcg-h2hw-4c86

Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1…

MEDIUM 41

Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to cause a denial of service (slapd crash) and possibly execute arbitrary code via a crafted LD…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04931 Published 2008-05-12 Fixed CWE-120

TI-2026-13229 CVE-2026-15722 · GHSA-5gg4-m865-6qwr

Stack-based buffer overflow in Red Hat Directory Server 11.5 E4S for RHEL 8

MEDIUM 40

A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0083 Published 2026-07-31 Partial fix · 8060020260908152739.0ca98e7e, 8080020260806114250.f969626e +14 CWE-121

TI-2026-07965 CVE-2026-9064 · GHSA-7r3c-wfgh-x96c

Resource allocation without limits in 389-ds-base

MEDIUM 40

A flaw was found in 389-ds-base.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00815 Published 2026-05-20 Partial fix · 8060020260609102432.0ca98e7e, 8080020260610130252.f969626e +15 CWE-770

TI-2026-10157 CVE-2026-11770 · GHSA-r7mx-568f-jgg3

389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check

LOW 39

A flaw was found in 389 Directory Server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00527 Published 2026-07-31 Partial fix · 8060020260908152739.0ca98e7e, 8080020260806114250.f969626e +14 CWE-90

TI-2008-03145 CVE-2008-3283 · GHSA-vxv8-22w3-3cgm

Multiple memory leaks in Red Hat Directory Server 7.1 before SP7, Red Hat Directory…

LOW 39

Multiple memory leaks in Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 and earlier allow remote attackers to cause a denial of service (memory consumption) via vec…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02854 Published 2008-08-29 Fixed CWE-399

TI-2024-05784 CVE-2024-6237 · GHSA-2fpj-qhmc-jpvc

389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request

LOW 37

A flaw was found in the 389 Directory Server.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00923 Published 2024-07-09 Fixed in 2.4.5, 9040020240723122852.1674d574 +1 CWE-230

TI-2008-00857 CVE-2008-0893 · GHSA-84ph-43p3-259x

Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, does…

LOW 37

Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, does not properly restrict access to CGI scripts, which allows remote attackers to perform administrative actions.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02012 Published 2008-04-16 Fixed CWE-264

TI-2022-01808 CVE-2022-1949 · GHSA-x847-vxvj-g6rj

Authorization bypass in 389-ds-base

LOW 36

An access control bypass vulnerability found in 389-ds-base.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01525 Published 2022-06-01 Will not fix CWE-639

TI-2011-00019 CVE-2011-0019 · GHSA-rxmx-rf7q-7wh5

slapd (aka ns-slapd) in 389 Directory Server 1.2.7.5 (aka Red Hat Directory Server 8.2.x…

LOW 36

slapd (aka ns-slapd) in 389 Directory Server 1.2.7.5 (aka Red Hat Directory Server 8.2.x or dirsrv) does not properly handle simple paged result searches, which allows remote attackers to cause a denial of service (daemo…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01422 Published 2011-02-23 Fixed CWE-20

TI-2010-02131 CVE-2010-2222 · GHSA-r732-c3fc-99gm

NULL pointer dereference in Red Hat Directory Server

LOW 36

The _ger_parse_control function in Red Hat Directory Server 8 and the 389 Directory Server allows attackers to cause a denial of service (NULL pointer dereference) via a crafted search query.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01349 Published 2019-11-05 No fix listed CWE-476

TI-2026-10175 CVE-2026-11788 · GHSA-x2wj-4r98-4867

389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser

LOW 34

A flaw was found in 389 Directory Server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00561 Published 2026-06-09 Partial fix · 8060020260908152739.0ca98e7e, 8080020260806114250.f969626e +14 CWE-476

TI-2026-12582 CVE-2026-14940 · GHSA-868f-j5w9-5jgm

389-ds-base: 389-ds-base: heap-buffer-overflow in dn normalization via quoted multivalued rdn

LOW 31

A heap-buffer-overflow flaw was found in 389 Directory Server (389-ds-base).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00487 Published 2026-07-07 Fix deferred CWE-122

TI-2026-10176 CVE-2026-11789 · GHSA-jjqx-m459-2x33

389-ds-base: 389-ds-base: smd5 password storage plugin salt length integer underflow crash

LOW 29

A flaw was found in 389 Directory Server.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00282 Published 2026-06-09 Fix deferred CWE-191

TI-2026-10173 CVE-2026-11786 · GHSA-8969-43cc-8p5h

389-ds-base: 389-ds-base: heap out-of-bounds read in ldif parser str2entry_state_information_from_type()

LOW 28

A flaw was found in 389 Directory Server.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0016 Published 2026-06-09 Fix deferred CWE-125

TI-2026-10024 CVE-2026-11611 · GHSA-m7g9-hmx3-c8f9

389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditions

LOW 28

A flaw was found in 389 Directory Server.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00244 Published 2026-06-08 Fix deferred CWE-400

TI-2026-10174 CVE-2026-11787 · GHSA-wjcg-9hh3-8323

389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsing

LOW 27

A flaw was found in 389 Directory Server.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00177 Published 2026-06-09 Fix deferred CWE-126

TI-2020-18037 CVE-2020-35518 · GHSA-vg4h-9m5m-rchq

Information disclosure in 389-ds-base

LOW 27

When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01538 Published 2021-03-26 Partial fix CWE-200

TI-2014-02886 CVE-2014-3562 · GHSA-6vvf-j83f-44mh

Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows…

LOW 27

Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02198 Published 2014-08-21 Fixed CWE-200

TI-2011-00459 CVE-2011-0532 · GHSA-pw8c-3x98-r358

The (1) backup and restore scripts, (2) main initialization script, and (3) ldap-agent…

LOW 27

The (1) backup and restore scripts, (2) main initialization script, and (3) ldap-agent script in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x) place a zero-length directory name in the LD_LIBRARY_PATH,…

CVSS 2.0MEDIUM 6.2 Local No auth Interaction — EPSS 0.00284 Published 2011-02-23 Fixed CWE-264

TI-2024-00983 CVE-2024-1062 · GHSA-6v6c-gc45-x65c

389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)

LOW 25

A heap overflow flaw was found in 389-ds-base.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00307 Published 2024-02-12 Partial fix · 2.3.0, 8060020250210084424.0ca98e7e +7 CWE-122

TI-2026-15284 CVE-2026-18651 · GHSA-q924-9ph6-5h92

Improper authentication in Red Hat Directory Server 11

LOW 24

A flaw was found in 389 Directory Server.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00282 Published 2026-08-03 Fix deferred CWE-287

Open these records in search →

Critical	792
High	2681
Medium	3429
Low	509
No CVSS	2