What’s Vulnerable › Products

Red Hat Directory Server 13 vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your Red Hat Directory Server 13 version is affected

Latest Red Hat Directory Server 13 vulnerabilities

• CVE-2026-117548 — 389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of service (CVSS 6.5)
• CVE-2026-86345 — 389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result (CVSS 9.0)
• CVE-2026-86344 — 389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue (CVSS 7.5)
• CVE-2026-78701 — 389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos (CVSS 6.5)
• CVE-2026-18663 — 389-ds-base: 389-ds-base: pre-authentication double-free in get_ldapmessage_controls_ext() via critical session tracking control (CVSS 5.9)
• CVE-2026-19404 — 389-ds-base: 389-ds-base: missing authorization allows anonymous clients to start or abort cleanallruv replication maintenance (CVSS 6.5)
• CVE-2026-16560 — 389-ds-base: 389-ds-base: heap-buffer-overflow in rdn_av_swap on quoted multivalued rdn (CVSS 5.3)
• CVE-2026-11884 — 389-ds-base: 389-ds-base: heap buffer overflow in schema objectclass serialization due to missing oc_superior in size calculation (CVSS 6.5)
• CVE-2026-11792 — 389-ds-base: 389-ds-base: heap buffer overflow in audit log password masking (create_masked_entry_string) (CVSS 3.3)
• CVE-2025-14905 — 389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow (CVSS 7.2)