https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:58:41.299022+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:0889 ALSA-2022:0889 — Low: 389-ds:1.4 security and bug fix update 2026-10-02T22:58:41.470305+00:00

Affected: AlmaLinux:8: 389-ds-base, AlmaLinux:8: 389-ds-base-devel, AlmaLinux:8: 389-ds-base-legacy-tools, AlmaLinux:8: 389-ds-base-libs, AlmaLinux:8: 389-ds-base-snmp, AlmaLinux:8: python3-lib389

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

* 389-ds-base: double free of the virtual attribute context in persistent search (CVE-2021-4091)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Paged search lookthroughlimit counter doesnt take read ahead into account (BZ#2059893)

* Based on 1944494 (RFC 4530 entryUUID attribute) - plugin entryuuid failing (BZ#2060106)

 https://cve.radiocsirt.org/vuln/bdu:2022-05559 bdu:2022-05559 2026-10-02T22:58:41.470380+00:00 bdu:2022-05559 https://cve.radiocsirt.org/vuln/euvd-2026-258010 EUVD-2026-258010 2026-10-02T22:58:41.470397+00:00 EUVD-2026-258010 https://cve.radiocsirt.org/vuln/fkie_cve-2021-4091 fkie_cve-2021-4091 2026-10-02T22:58:41.470409+00:00

A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.

 https://cve.radiocsirt.org/vuln/ghsa-qwhp-2gp7-qhfq GHSA-qwhp-2gp7-qhfq 2026-10-02T22:58:41.470430+00:00

A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.

 https://cve.radiocsirt.org/vuln/gsd-2021-4091 gsd-2021-4091 2026-10-02T22:58:41.470445+00:00 gsd-2021-4091 https://cve.radiocsirt.org/vuln/rhsa-2022:0628 RHSA-2022:0628 — Red Hat Security Advisory: 389-ds-base security and bug fix update 2026-10-02T22:58:41.470455+00:00

389-ds-base: double free of the virtual attribute context in persistent search

 https://cve.radiocsirt.org/vuln/rhsa-2022:0952 RHSA-2022:0952 — Red Hat Security Advisory: redhat-ds:11.3 security and bug fix update 2026-10-02T22:58:41.470473+00:00

389-ds-base: sync_repl NULL pointer dereference in sync_create_state_control() 389-ds-base: double free of the virtual attribute context in persistent search

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-4091 UBUNTU-CVE-2021-4091 2026-10-02T22:58:41.470491+00:00

Affected: Ubuntu:Pro:16.04:LTS: 389-ds-base, Ubuntu:Pro:18.04:LTS: 389-ds-base, Ubuntu:Pro:20.04:LTS: 389-ds-base, Ubuntu:22.04:LTS: 389-ds-base, Ubuntu:24.04:LTS: 389-ds-base, Ubuntu:25.10: 389-ds-base, Ubuntu:26.04:LTS: 389-ds-base

A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.