https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T23:06:21.047005+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:4491 ALSA-2025:4491 — Moderate: 389-ds-base security update 2026-10-12T23:06:21.054556+00:00

Affected: AlmaLinux:9: 389-ds-base, AlmaLinux:9: 389-ds-base-devel, AlmaLinux:9: 389-ds-base-libs, AlmaLinux:9: 389-ds-base-snmp, AlmaLinux:9: python3-lib389

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

* 389-ds-base: null pointer dereference leads to denial of service (CVE-2025-2487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-00276 bdu:2026-00276 2026-10-12T23:06:21.054613+00:00 bdu:2026-00276 https://cve.radiocsirt.org/vuln/euvd-2026-331245 EUVD-2026-331245 2026-10-12T23:06:21.054629+00:00 EUVD-2026-331245 https://cve.radiocsirt.org/vuln/fkie_cve-2025-2487 fkie_cve-2025-2487 2026-10-12T23:06:21.054640+00:00

A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested and a NULL pointer is dereferenced. If a privileged user performs a ldap MODDN operation after a failed operation, it could lead to a Denial of Service (DoS) or system crash.

 https://cve.radiocsirt.org/vuln/ghsa-33fh-4pvq-9x35 GHSA-33fh-4pvq-9x35 2026-10-12T23:06:21.054661+00:00

A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested and a NULL pointer is dereferenced. If a privileged user performs a ldap MODDN operation after a failed operation, it could lead to a Denial of Service (DoS) or system crash.

 https://cve.radiocsirt.org/vuln/oesa-2025-1373 OESA-2025-1373 — three-eight-nine-ds-base security update 2026-10-12T23:06:21.054675+00:00

Affected: openEuler:24.03-LTS-SP1: three-eight-nine-ds-base

389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration. Security Fix(es):

A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested and a NULL pointer is dereferenced. If a privileged user performs a ldap MODDN operation after a failed operation, it could lead to a Denial of Service (DoS) or system crash.(CVE-2025-2487)

 https://cve.radiocsirt.org/vuln/rhsa-2025:3663 RHSA-2025:3663 — Red Hat Security Advisory: 389-ds-base security update 2026-10-12T23:06:21.054697+00:00

389-ds-base: null pointer dereference leads to denial of service

 https://cve.radiocsirt.org/vuln/rhsa-2025:4491 RHSA-2025:4491 — security update for 389-ds-base 2026-10-12T23:06:21.054712+00:00

security update for 389-ds-base

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-2487 UBUNTU-CVE-2025-2487 2026-10-12T23:06:21.054725+00:00

Affected: Ubuntu:Pro:16.04:LTS: 389-ds-base, Ubuntu:Pro:18.04:LTS: 389-ds-base, Ubuntu:Pro:20.04:LTS: 389-ds-base, Ubuntu:22.04:LTS: 389-ds-base, Ubuntu:24.04:LTS: 389-ds-base, Ubuntu:25.10: 389-ds-base, Ubuntu:26.04:LTS: 389-ds-base

A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested and a NULL pointer is dereferenced. If a privileged user performs a ldap MODDN operation after a failed operation, it could lead to a Denial of Service (DoS) or system crash.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0733 WID-SEC-W-2025-0733 — Red Hat Enterprise Linux: Mehrere Schwachstellen 2026-10-12T23:06:21.054750+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux und Directory Server ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service auzulösen.