What’s Vulnerable › Products
Red Hat Directory Server 12 vulnerabilities
17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 17 published in the last 12 months.
Check whether your Red Hat Directory Server 12 version is affected
Latest Red Hat Directory Server 12 vulnerabilities
- CVE-2026-117548 — 389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of service (CVSS 6.5)
- CVE-2026-86345 — 389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result (CVSS 9.0)
- CVE-2026-86344 — 389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue (CVSS 7.5)
- CVE-2026-19843 — 389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor (CVSS 8.4)
- CVE-2026-18922 — 389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary property (CVSS 9.8)
- CVE-2026-18453 — 389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search (CVSS 7.5)
- CVE-2026-18355 — 389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet() (CVSS 7.5)
- CVE-2026-76560 — 389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn (CVSS 7.5)
- CVE-2026-78701 — 389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos (CVSS 6.5)
- CVE-2026-19404 — 389-ds-base: 389-ds-base: missing authorization allows anonymous clients to start or abort cleanallruv replication maintenance (CVSS 6.5)
- CVE-2026-16560 — 389-ds-base: 389-ds-base: heap-buffer-overflow in rdn_av_swap on quoted multivalued rdn (CVSS 5.3)
- CVE-2026-11610 — 389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbind (CVSS 8.8)
- CVE-2026-11774 — 389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow (CVSS 7.6)
- CVE-2026-11884 — 389-ds-base: 389-ds-base: heap buffer overflow in schema objectclass serialization due to missing oc_superior in size calculation (CVSS 6.5)
- CVE-2026-11792 — 389-ds-base: 389-ds-base: heap buffer overflow in audit log password masking (create_masked_entry_string) (CVSS 3.3)
- CVE-2025-14905 — 389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow (CVSS 7.2)
- CVE-2025-3416 — Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch` (CVSS 3.7)