https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T05:12:00.044605+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:3837 ALSA-2024:3837 — Important: 389-ds-base security update 2026-10-12T05:12:00.056965+00:00

Affected: AlmaLinux:9: 389-ds-base, AlmaLinux:9: 389-ds-base-devel, AlmaLinux:9: 389-ds-base-libs, AlmaLinux:9: python3-lib389

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657) * 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-11957 bdu:2025-11957 2026-10-12T05:12:00.057020+00:00 bdu:2025-11957 https://cve.radiocsirt.org/vuln/euvd-2026-330483 EUVD-2026-330483 2026-10-12T05:12:00.057036+00:00 EUVD-2026-330483 https://cve.radiocsirt.org/vuln/fkie_cve-2024-2199 fkie_cve-2024-2199 2026-10-12T05:12:00.057047+00:00

A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.

 https://cve.radiocsirt.org/vuln/gsd-2024-2199 gsd-2024-2199 2026-10-12T05:12:00.057067+00:00 gsd-2024-2199 https://cve.radiocsirt.org/vuln/oesa-2024-1724 OESA-2024-1724 — three-eight-nine-ds-base security update 2026-10-12T05:12:00.057078+00:00

Affected: openEuler:20.03-LTS-SP4: three-eight-nine-ds-base, openEuler:22.03-LTS-SP1: three-eight-nine-ds-base, openEuler:22.03-LTS-SP3: three-eight-nine-ds-base, openEuler:24.03-LTS: three-eight-nine-ds-base

389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration. Security Fix(es): A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.(CVE-2024-2199) A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service(CVE-2024-3657)

 https://cve.radiocsirt.org/vuln/rhsa-2024:3591 RHSA-2024:3591 — Red Hat Security Advisory: 389-ds-base security update 2026-10-12T05:12:00.057103+00:00

389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request

 https://cve.radiocsirt.org/vuln/rhsa-2024:4092 RHSA-2024:4092 — Red Hat Security Advisory: redhat-ds:12 security, bug fix update 2026-10-12T05:12:00.057121+00:00

389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-2199 UBUNTU-CVE-2024-2199 2026-10-12T05:12:00.057135+00:00

Affected: Ubuntu:Pro:16.04:LTS: 389-ds-base, Ubuntu:Pro:18.04:LTS: 389-ds-base, Ubuntu:Pro:20.04:LTS: 389-ds-base, Ubuntu:22.04:LTS: 389-ds-base, Ubuntu:24.04:LTS: 389-ds-base, Ubuntu:25.10: 389-ds-base, Ubuntu:26.04:LTS: 389-ds-base

A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1290 WID-SEC-W-2024-1290 — Red Hat Enterprise Linux: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-12T05:12:00.057160+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux und Red Hat Directory Server ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen.