https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:40:46.560159+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:5192 ALSA-2024:5192 — Moderate: 389-ds-base security update 2026-10-03T19:40:46.722734+00:00

Affected: AlmaLinux:9: 389-ds-base, AlmaLinux:9: 389-ds-base-devel, AlmaLinux:9: 389-ds-base-libs, AlmaLinux:9: python3-lib389

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953) * 389-ds-base: unauthenticated user can trigger a DoS by sending a specific extended search request (CVE-2024-6237)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-11968 bdu:2025-11968 2026-10-03T19:40:46.722798+00:00 bdu:2025-11968 https://cve.radiocsirt.org/vuln/euvd-2026-261557 EUVD-2026-261557 2026-10-03T19:40:46.722816+00:00 EUVD-2026-261557 https://cve.radiocsirt.org/vuln/fkie_cve-2024-6237 fkie_cve-2024-6237 2026-10-03T19:40:46.722829+00:00

A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-2fpj-qhmc-jpvc GHSA-2fpj-qhmc-jpvc 2026-10-03T19:40:46.722851+00:00

A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.

 https://cve.radiocsirt.org/vuln/oesa-2024-2166 OESA-2024-2166 — three-eight-nine-ds-base security update 2026-10-03T19:40:46.722866+00:00

Affected: openEuler:24.03-LTS: three-eight-nine-ds-base

389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration. Security Fix(es): A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.(CVE-2024-5953) A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.(CVE-2024-6237)

 https://cve.radiocsirt.org/vuln/rhsa-2024:4997 RHSA-2024:4997 — Red Hat Security Advisory: redhat-ds:12 security and bug fix update 2026-10-03T19:40:46.722889+00:00

389-ds-base: Malformed userPassword hash may cause Denial of Service 389-ds-base: unauthenticated user can trigger a DoS by sending a specific extended search request

 https://cve.radiocsirt.org/vuln/rhsa-2024:5192 RHSA-2024:5192 — Red Hat Security Advisory: 389-ds-base security update 2026-10-03T19:40:46.722909+00:00

389-ds-base: Malformed userPassword hash may cause Denial of Service 389-ds-base: unauthenticated user can trigger a DoS by sending a specific extended search request

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-6237 UBUNTU-CVE-2024-6237 2026-10-03T19:40:46.722926+00:00

Affected: Ubuntu:Pro:16.04:LTS: 389-ds-base, Ubuntu:Pro:18.04:LTS: 389-ds-base, Ubuntu:Pro:20.04:LTS: 389-ds-base, Ubuntu:22.04:LTS: 389-ds-base, Ubuntu:26.04:LTS: 389-ds-base

A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1610 WID-SEC-W-2024-1610 — Red Hat Directory Server und Red Hat Enterprise Linux: Schwachstelle ermöglicht Denial of Service 2026-10-03T19:40:46.722950+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Directory Server und Red Hat Enterprise Linux in der Komponente 389-ds-base ausnutzen, um einen Denial of Service Angriff durchzuführen.