https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:41:44 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:5192 <p><strong>Affected:</strong> AlmaLinux:9: 389-ds-base, AlmaLinux:9: 389-ds-base-devel, AlmaLinux:9: 389-ds-base-libs, AlmaLinux:9: python3-lib389</p> <p>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.</p> <p>Security Fix(es):</p> <p>* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953) * 389-ds-base: unauthenticated user can trigger a DoS by sending a specific extended search request (CVE-2024-6237)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: 389-ds-base, AlmaLinux:9: 389-ds-base-devel, AlmaLinux:9: 389-ds-base-libs, AlmaLinux:9: python3-lib389</p> <p>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.</p> <p>Security Fix(es):</p> <p>* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953) * 389-ds-base: unauthenticated user can trigger a DoS by sending a specific extended search request (CVE-2024-6237)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:5192 https://cve.radiocsirt.org/vuln/bdu:2025-11968 bdu:2025-11968 https://cve.radiocsirt.org/vuln/bdu:2025-11968 https://cve.radiocsirt.org/vuln/euvd-2026-261557 EUVD-2026-261557 https://cve.radiocsirt.org/vuln/euvd-2026-261557 https://cve.radiocsirt.org/vuln/fkie_cve-2024-6237 <p>A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.</p> <p>A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-6237 https://cve.radiocsirt.org/vuln/ghsa-2fpj-qhmc-jpvc <p>A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.</p> <p>A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.</p> https://cve.radiocsirt.org/vuln/ghsa-2fpj-qhmc-jpvc https://cve.radiocsirt.org/vuln/oesa-2024-2166 <p><strong>Affected:</strong> openEuler:24.03-LTS: three-eight-nine-ds-base</p> <p>389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration. Security Fix(es): A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.(CVE-2024-5953) A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.(CVE-2024-6237)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: three-eight-nine-ds-base</p> <p>389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration. Security Fix(es): A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.(CVE-2024-5953) A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.(CVE-2024-6237)</p> https://cve.radiocsirt.org/vuln/oesa-2024-2166 https://cve.radiocsirt.org/vuln/rhsa-2024:4997 <p>389-ds-base: Malformed userPassword hash may cause Denial of Service 389-ds-base: unauthenticated user can trigger a DoS by sending a specific extended search request</p> <p>389-ds-base: Malformed userPassword hash may cause Denial of Service 389-ds-base: unauthenticated user can trigger a DoS by sending a specific extended search request</p> https://cve.radiocsirt.org/vuln/rhsa-2024:4997 https://cve.radiocsirt.org/vuln/rhsa-2024:5192 <p>389-ds-base: Malformed userPassword hash may cause Denial of Service 389-ds-base: unauthenticated user can trigger a DoS by sending a specific extended search request</p> <p>389-ds-base: Malformed userPassword hash may cause Denial of Service 389-ds-base: unauthenticated user can trigger a DoS by sending a specific extended search request</p> https://cve.radiocsirt.org/vuln/rhsa-2024:5192 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-6237 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: 389-ds-base, Ubuntu:Pro:18.04:LTS: 389-ds-base, Ubuntu:Pro:20.04:LTS: 389-ds-base, Ubuntu:22.04:LTS: 389-ds-base, Ubuntu:26.04:LTS: 389-ds-base</p> <p>A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: 389-ds-base, Ubuntu:Pro:18.04:LTS: 389-ds-base, Ubuntu:Pro:20.04:LTS: 389-ds-base, Ubuntu:22.04:LTS: 389-ds-base, Ubuntu:26.04:LTS: 389-ds-base</p> <p>A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-6237 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1610 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Directory Server und Red Hat Enterprise Linux in der Komponente 389-ds-base ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Directory Server und Red Hat Enterprise Linux in der Komponente 389-ds-base ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1610