https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:10:08 +0000 https://cve.radiocsirt.org/vuln/alsa-2022:0889 <p><strong>Affected:</strong> AlmaLinux:8: 389-ds-base, AlmaLinux:8: 389-ds-base-devel, AlmaLinux:8: 389-ds-base-legacy-tools, AlmaLinux:8: 389-ds-base-libs, AlmaLinux:8: 389-ds-base-snmp, AlmaLinux:8: python3-lib389</p> <p>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.</p> <p>Security Fix(es):</p> <p>* 389-ds-base: double free of the virtual attribute context in persistent search (CVE-2021-4091)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Bug Fix(es):</p> <p>* Paged search lookthroughlimit counter doesnt take read ahead into account (BZ#2059893)</p> <p>* Based on 1944494 (RFC 4530 entryUUID attribute) - plugin entryuuid failing (BZ#2060106)</p> <p><strong>Affected:</strong> AlmaLinux:8: 389-ds-base, AlmaLinux:8: 389-ds-base-devel, AlmaLinux:8: 389-ds-base-legacy-tools, AlmaLinux:8: 389-ds-base-libs, AlmaLinux:8: 389-ds-base-snmp, AlmaLinux:8: python3-lib389</p> <p>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.</p> <p>Security Fix(es):</p> <p>* 389-ds-base: double free of the virtual attribute context in persistent search (CVE-2021-4091)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Bug Fix(es):</p> <p>* Paged search lookthroughlimit counter doesnt take read ahead into account (BZ#2059893)</p> <p>* Based on 1944494 (RFC 4530 entryUUID attribute) - plugin entryuuid failing (BZ#2060106)</p> https://cve.radiocsirt.org/vuln/alsa-2022:0889 https://cve.radiocsirt.org/vuln/bdu:2022-05559 bdu:2022-05559 https://cve.radiocsirt.org/vuln/bdu:2022-05559 https://cve.radiocsirt.org/vuln/euvd-2026-258010 EUVD-2026-258010 https://cve.radiocsirt.org/vuln/euvd-2026-258010 https://cve.radiocsirt.org/vuln/fkie_cve-2021-4091 <p>A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.</p> <p>A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-4091 https://cve.radiocsirt.org/vuln/ghsa-qwhp-2gp7-qhfq <p>A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.</p> <p>A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.</p> https://cve.radiocsirt.org/vuln/ghsa-qwhp-2gp7-qhfq https://cve.radiocsirt.org/vuln/gsd-2021-4091 gsd-2021-4091 https://cve.radiocsirt.org/vuln/gsd-2021-4091 https://cve.radiocsirt.org/vuln/rhsa-2022:0628 <p>389-ds-base: double free of the virtual attribute context in persistent search</p> <p>389-ds-base: double free of the virtual attribute context in persistent search</p> https://cve.radiocsirt.org/vuln/rhsa-2022:0628 https://cve.radiocsirt.org/vuln/rhsa-2022:0952 <p>389-ds-base: sync_repl NULL pointer dereference in sync_create_state_control() 389-ds-base: double free of the virtual attribute context in persistent search</p> <p>389-ds-base: sync_repl NULL pointer dereference in sync_create_state_control() 389-ds-base: double free of the virtual attribute context in persistent search</p> https://cve.radiocsirt.org/vuln/rhsa-2022:0952 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-4091 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: 389-ds-base, Ubuntu:Pro:18.04:LTS: 389-ds-base, Ubuntu:Pro:20.04:LTS: 389-ds-base, Ubuntu:22.04:LTS: 389-ds-base, Ubuntu:24.04:LTS: 389-ds-base, Ubuntu:25.10: 389-ds-base, Ubuntu:26.04:LTS: 389-ds-base</p> <p>A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: 389-ds-base, Ubuntu:Pro:18.04:LTS: 389-ds-base, Ubuntu:Pro:20.04:LTS: 389-ds-base, Ubuntu:22.04:LTS: 389-ds-base, Ubuntu:24.04:LTS: 389-ds-base, Ubuntu:25.10: 389-ds-base, Ubuntu:26.04:LTS: 389-ds-base</p> <p>A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-4091