What’s Vulnerable › Products

Red Hat Directory Server 11.9 for RHEL 8 vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your Red Hat Directory Server 11.9 for RHEL 8 version is affected

Latest Red Hat Directory Server 11.9 for RHEL 8 vulnerabilities

• CVE-2026-19843 — 389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor (CVSS 8.4)
• CVE-2026-18922 — 389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary property (CVSS 9.8)
• CVE-2026-18453 — 389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search (CVSS 7.5)
• CVE-2026-18355 — 389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet() (CVSS 7.5)
• CVE-2026-76560 — 389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn (CVSS 7.5)
• CVE-2026-11610 — 389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbind (CVSS 8.8)
• CVE-2026-11774 — 389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow (CVSS 7.6)
• CVE-2025-14905 — 389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow (CVSS 7.2)
• CVE-2024-5953 — 389-ds-base: malformed userpassword hash may cause denial of service (CVSS 5.7)
• CVE-2024-3657 — 389-ds-base: potential denial of service via specially crafted kerberos as-req request (CVSS 7.5)
• CVE-2024-2199 — 389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c (CVSS 5.7)