https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:53:10.978878+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:5192 ALSA-2024:5192 — Moderate: 389-ds-base security update 2026-10-02T23:53:11.297441+00:00

Affected: AlmaLinux:9: 389-ds-base, AlmaLinux:9: 389-ds-base-devel, AlmaLinux:9: 389-ds-base-libs, AlmaLinux:9: python3-lib389

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953) * 389-ds-base: unauthenticated user can trigger a DoS by sending a specific extended search request (CVE-2024-6237)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-03459 bdu:2025-03459 2026-10-02T23:53:11.297537+00:00 bdu:2025-03459 https://cve.radiocsirt.org/vuln/euvd-2026-270737 EUVD-2026-270737 2026-10-02T23:53:11.297569+00:00 EUVD-2026-270737 https://cve.radiocsirt.org/vuln/fkie_cve-2024-5953 fkie_cve-2024-5953 2026-10-02T23:53:11.297590+00:00

A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.

 https://cve.radiocsirt.org/vuln/ghsa-9h7v-6cr6-hcpx GHSA-9h7v-6cr6-hcpx 2026-10-02T23:53:11.297634+00:00

A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.

 https://cve.radiocsirt.org/vuln/oesa-2024-2164 OESA-2024-2164 — three-eight-nine-ds-base security update 2026-10-02T23:53:11.297663+00:00

Affected: openEuler:20.03-LTS-SP4: three-eight-nine-ds-base

389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration. Security Fix(es): An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any remote unauthenticated user to issue a filter that allows searching for database items they do not have access to, including but not limited to potentially userPassword hashes and other sensitive data.(CVE-2022-1949) A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.(CVE-2024-5953)

 https://cve.radiocsirt.org/vuln/rhsa-2024:4633 RHSA-2024:4633 — Red Hat Security Advisory: 389-ds-base security update 2026-10-02T23:53:11.297704+00:00

389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request 389-ds-base: Malformed userPassword hash may cause Denial of Service

 https://cve.radiocsirt.org/vuln/rhsa-2024:5192 RHSA-2024:5192 — Red Hat Security Advisory: 389-ds-base security update 2026-10-02T23:53:11.297740+00:00

389-ds-base: Malformed userPassword hash may cause Denial of Service 389-ds-base: unauthenticated user can trigger a DoS by sending a specific extended search request

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-5953 UBUNTU-CVE-2024-5953 2026-10-02T23:53:11.297777+00:00

Affected: Ubuntu:Pro:16.04:LTS: 389-ds-base, Ubuntu:Pro:18.04:LTS: 389-ds-base, Ubuntu:Pro:20.04:LTS: 389-ds-base, Ubuntu:22.04:LTS: 389-ds-base, Ubuntu:24.04:LTS: 389-ds-base, Ubuntu:25.10: 389-ds-base, Ubuntu:26.04:LTS: 389-ds-base

A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1812 WID-SEC-W-2024-1812 — Red Hat Enterprise Linux (389-ds-base ldap server): Schwachstelle ermöglicht Denial of Service 2026-10-02T23:53:11.297830+00:00

Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in Red Hat Enterprise Linux und Red Hat Directory Server ausnutzen, um einen Denial of Service Angriff durchzuführen.