https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 23:36:32 +0000 https://cve.radiocsirt.org/vuln/alsa-2022:5823 <p><strong>Affected:</strong> AlmaLinux:8: 389-ds-base, AlmaLinux:8: 389-ds-base-devel, AlmaLinux:8: 389-ds-base-legacy-tools, AlmaLinux:8: 389-ds-base-libs, AlmaLinux:8: 389-ds-base-snmp, AlmaLinux:8: python3-lib389</p> <p>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: sending crafted message could result in DoS (CVE-2022-0918) * 389-ds-base: expired password was still allowed to access the database (CVE-2022-0996) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: 389-ds-base, AlmaLinux:8: 389-ds-base-devel, AlmaLinux:8: 389-ds-base-legacy-tools, AlmaLinux:8: 389-ds-base-libs, AlmaLinux:8: 389-ds-base-snmp, AlmaLinux:8: python3-lib389</p> <p>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: sending crafted message could result in DoS (CVE-2022-0918) * 389-ds-base: expired password was still allowed to access the database (CVE-2022-0996) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2022:5823 https://cve.radiocsirt.org/vuln/bdu:2023-02637 bdu:2023-02637 https://cve.radiocsirt.org/vuln/bdu:2023-02637 https://cve.radiocsirt.org/vuln/euvd-2026-258036 EUVD-2026-258036 https://cve.radiocsirt.org/vuln/euvd-2026-258036 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0918 <p>A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.</p> <p>A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-0918 https://cve.radiocsirt.org/vuln/ghsa-2h5q-vphx-mcwx <p>A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.</p> <p>A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.</p> https://cve.radiocsirt.org/vuln/ghsa-2h5q-vphx-mcwx https://cve.radiocsirt.org/vuln/gsd-2022-0918 gsd-2022-0918 https://cve.radiocsirt.org/vuln/gsd-2022-0918 https://cve.radiocsirt.org/vuln/rhsa-2022:2210 <p>389-ds-base: sending crafted message could result in DoS</p> <p>389-ds-base: sending crafted message could result in DoS</p> https://cve.radiocsirt.org/vuln/rhsa-2022:2210 https://cve.radiocsirt.org/vuln/rhsa-2022:5239 <p>389-ds-base: sending crafted message could result in DoS 389-ds-base: expired password was still allowed to access the database</p> <p>389-ds-base: sending crafted message could result in DoS 389-ds-base: expired password was still allowed to access the database</p> https://cve.radiocsirt.org/vuln/rhsa-2022:5239 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-0918 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: 389-ds-base, Ubuntu:Pro:18.04:LTS: 389-ds-base, Ubuntu:Pro:20.04:LTS: 389-ds-base, Ubuntu:22.04:LTS: 389-ds-base, Ubuntu:24.04:LTS: 389-ds-base, Ubuntu:25.10: 389-ds-base, Ubuntu:26.04:LTS: 389-ds-base</p> <p>A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: 389-ds-base, Ubuntu:Pro:18.04:LTS: 389-ds-base, Ubuntu:Pro:20.04:LTS: 389-ds-base, Ubuntu:22.04:LTS: 389-ds-base, Ubuntu:24.04:LTS: 389-ds-base, Ubuntu:25.10: 389-ds-base, Ubuntu:26.04:LTS: 389-ds-base</p> <p>A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-0918 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0454 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Directory Server ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Directory Server ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0454