https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T00:03:20.569438+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:7133 ALSA-2022:7133 — Moderate: 389-ds:1.4 security update 2026-10-09T00:03:20.785785+00:00

Affected: AlmaLinux:8: 389-ds-base, AlmaLinux:8: 389-ds-base-devel, AlmaLinux:8: 389-ds-base-legacy-tools, AlmaLinux:8: 389-ds-base-libs, AlmaLinux:8: 389-ds-base-snmp, AlmaLinux:8: python3-lib389

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

* 389-ds-base: SIGSEGV in sync_repl (CVE-2022-2850)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-04786 bdu:2023-04786 2026-10-09T00:03:20.785861+00:00 bdu:2023-04786 https://cve.radiocsirt.org/vuln/euvd-2026-258048 EUVD-2026-258048 2026-10-09T00:03:20.785881+00:00 EUVD-2026-258048 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2850 fkie_cve-2022-2850 2026-10-09T00:03:20.785893+00:00

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix of CVE-2021-3514.

 https://cve.radiocsirt.org/vuln/ghsa-6c63-4574-7p9f GHSA-6c63-4574-7p9f 2026-10-09T00:03:20.785916+00:00

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix of CVE-2021-3514.

 https://cve.radiocsirt.org/vuln/gsd-2022-2850 gsd-2022-2850 2026-10-09T00:03:20.785931+00:00 gsd-2022-2850 https://cve.radiocsirt.org/vuln/rhsa-2022:7087 RHSA-2022:7087 — Red Hat Security Advisory: 389-ds-base security and bug fix update 2026-10-09T00:03:20.785942+00:00

389-ds-base: SIGSEGV in sync_repl

 https://cve.radiocsirt.org/vuln/rhsa-2022:8680 RHSA-2022:8680 — Red Hat Security Advisory: 389-ds:1.4 security update 2026-10-09T00:03:20.785959+00:00

389-ds-base: SIGSEGV in sync_repl

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2850 UBUNTU-CVE-2022-2850 2026-10-09T00:03:20.785974+00:00

Affected: Ubuntu:Pro:16.04:LTS: 389-ds-base, Ubuntu:Pro:18.04:LTS: 389-ds-base, Ubuntu:Pro:20.04:LTS: 389-ds-base, Ubuntu:22.04:LTS: 389-ds-base, Ubuntu:24.04:LTS: 389-ds-base, Ubuntu:25.10: 389-ds-base, Ubuntu:26.04:LTS: 389-ds-base

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix of CVE-2021-3514.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1858 WID-SEC-W-2022-1858 — Red Hat Enterprise Linux (389-ds-base): Schwachstelle ermöglicht Denial of Service 2026-10-09T00:03:20.786003+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux in der Komponente "389-ds-base" ausnutzen, um einen Denial of Service Angriff durchzuführen.