https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:24:28.199741+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-333712 EUVD-2026-333712 2026-10-03T00:24:28.261594+00:00 EUVD-2026-333712 https://cve.radiocsirt.org/vuln/fkie_cve-2026-14969 fkie_cve-2026-14969 2026-10-03T00:24:28.261628+00:00

A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for AES-CBC and 3DES-CBC operations, allowing an attacker with privileged filesystem access to detect plaintext equality across encrypted entries by comparing ciphertext blocks.

 https://cve.radiocsirt.org/vuln/ghsa-9458-4323-hx4r GHSA-9458-4323-hx4r 2026-10-03T00:24:28.261659+00:00

A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for AES-CBC and 3DES-CBC operations, allowing an attacker with privileged filesystem access to detect plaintext equality across encrypted entries by comparing ciphertext blocks.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-14969 UBUNTU-CVE-2026-14969 2026-10-03T00:24:28.261676+00:00

Affected: Ubuntu:Pro:16.04:LTS: 389-ds-base, Ubuntu:Pro:18.04:LTS: 389-ds-base, Ubuntu:Pro:20.04:LTS: 389-ds-base, Ubuntu:22.04:LTS: 389-ds-base, Ubuntu:24.04:LTS: 389-ds-base, Ubuntu:25.10: 389-ds-base, Ubuntu:26.04:LTS: 389-ds-base

A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for AES-CBC and 3DES-CBC operations, allowing an attacker with privileged filesystem access to detect plaintext equality across encrypted entries by comparing ciphertext blocks.