Red hat directory server 11

This hub aggregates every CVE we track for Red hat directory server 11, a product in the databases space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Red hat directory server 11.

• CVE-2026-18651389-ds-base: 389-ds-base: sasl plain bind installs connection credentials before account-lock check, allowing continued access as a locked account5.4Aug 3, 2026
• CVE-2026-11770389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check7.5Jul 31, 2026
• CVE-2026-15722389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing7.5Jul 31, 2026
• CVE-2026-16560389-ds-base: 389-ds-base: heap-buffer-overflow in rdn_av_swap on quoted multivalued rdn5.3Jul 22, 2026
• CVE-2026-15041389-ds-base: 389-ds-base: non-constant-time comparison in pbkdf2-sha256 password verification3.7Jul 8, 2026
• CVE-2026-14969389-ds-base: 389-ds-base: static initialization vector in aes-cbc/3des-cbc attribute encryption4.4Jul 7, 2026
• CVE-2026-14940389-ds-base: 389-ds-base: heap-buffer-overflow in dn normalization via quoted multivalued rdn5.3Jul 7, 2026
• CVE-2026-11791389-ds-base: 389-ds-base: use-after-free in schema reload via attr_syntax_swap_ht()5.0Jun 18, 2026
• CVE-2026-12528389-ds-base: 389-ds-base: heap-buffer-overflows in __aclp__normalize_acltxt()5.4Jun 17, 2026
• CVE-2026-11884389-ds-base: 389-ds-base: heap buffer overflow in schema objectclass serialization due to missing oc_superior in size calculation6.5Jun 10, 2026
• CVE-2026-11792389-ds-base: 389-ds-base: heap buffer overflow in audit log password masking (create_masked_entry_string)3.3Jun 9, 2026
• CVE-2026-11793389-ds-base: 389-ds-base: stack buffer overflow in checkprefix() algorithm id parsing4.9Jun 9, 2026
• CVE-2026-11790389-ds-base: 389-ds-base: pbkdf2 password storage plugin unbounded iteration count denial of service4.9Jun 9, 2026
• CVE-2026-11789389-ds-base: 389-ds-base: smd5 password storage plugin salt length integer underflow crash4.9Jun 9, 2026
• CVE-2026-11788389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser5.9Jun 9, 2026