Known vulnerabilities in 389-ds-base (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:389-ds-base_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 14
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting 389-ds-base (Red Hat package) 389-ds-base (Red Hat package) is affected by 14 known vulnerabilities: 10 medium, 4 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123263 - Heap-based Buffer Overflow
CVE-2025-14905
CWE-122 Low
No
No
1.3.11.1-11.el7_9, 2.0.14-5.el9_0, 2.2.4-17.el9_2, 2.6.1-20.el9_6, 2.7.0-10.el9_7, 3.0.6-17.el10_0, 3.1.3-7.el10_1 25.02.2026 SB2026022544
SB2026022547
SB2026022548
and 16 more
#VU106055 - NULL Pointer Dereference
CVE-2025-2487
CWE-476 Low
No
No
2.5.2-9.el9_5, 2.6.1-8.el9_6 26.03.2025 SB2025032629
SB20250403103
SB20250403104
and 2 more
#VU97939 - Improper input validation
CVE-2024-8445
CWE-20 Medium
No
No
1.3.11.1-7.el7_9 02.10.2024 SB2024100204
SB2024100205
SB2025022462
and 3 more
#VU95534 - Improper input validation
CVE-2024-6237
CWE-20 Medium
No
No
2.4.5-9.el9_4 08.08.2024 SB2024080821
SB2024080822
SB2024081204
and 1 more
#VU94615 - Improper input validation
CVE-2024-5953
CWE-20 Low
No
No
1.3.11.1-6.el7_9, 2.2.4-9.el9_2, 2.4.5-9.el9_4 19.07.2024 SB2024071926
SB2024071931
SB2024080577
and 25 more
#VU93312 - Improper input validation
CVE-2024-3657
CWE-20 Medium
No
No
1.3.11.1-5.el7_9, 2.2.4-9.el9_2, 2.4.5-8.el9_4 25.06.2024 SB20240625103
SB20240625104
SB20240625105
and 22 more
#VU93311 - Improper input validation
CVE-2024-2199
CWE-20 Medium
No
No
1.3.11.1-5.el7_9, 2.2.4-9.el9_2, 2.4.5-8.el9_4 25.06.2024 SB20240625102
SB20240625104
SB20240625105
and 24 more
#VU87107 - Heap-based Buffer Overflow
CVE-2024-1062
CWE-122 Low
No
No
2.2.4-9.el9_2 05.03.2024 SB2024030509
SB20240312217
SB2024031864
and 13 more
#VU66990 - NULL Pointer Dereference
CVE-2022-2850
CWE-476 Medium
No
No
1.3.10.2-17.el7_9, 2.0.14-3.el9_0, 2.1.3-4.el9_1 06.09.2022 SB2022090601
SB2022090606
SB2022091702
and 11 more
#VU64661 - Insufficient Session Expiration
CVE-2022-0996
CWE-613 Medium
No
No
1.3.10.2-16.el7_9, 2.0.14-3.el9_0, 2.1.3-4.el9_1 24.06.2022 SB2022062433
SB2022062933
SB2022072073
and 13 more
#VU63128 - Memory corruption
CVE-2022-0918
CWE-119 Medium
Available
No
1.3.10.2-16.el7_9, 1.4.3.29-3.module+el8dsrv+14615+a86efbbf, 2.0.14-3.el9_0, 2.1.3-4.el9_1 12.05.2022 SB2022051236
SB2022051237
SB2022062433
and 13 more
#VU60867 - Use After Free
CVE-2021-4091
CWE-416 Medium
No
No
1.3.10.2-15.el7_9 25.02.2022 SB2022022501
SB2022022502
SB2022022528
and 11 more
#VU55334 - Improper Authentication
CVE-2021-3652
CWE-287 Medium
No
No
1.3.10.2-13.el7_9 27.07.2021 SB2021072715
SB2021072716
SB2021081121
and 11 more
#VU54105 - Exposure of sensitive information to an unauthorized actor
CVE-2020-35518
CWE-200 Medium
No
No
1.3.10.2-12.el7_9 15.06.2021 SB2021061502
SB2021061505
SB2021062118
and 12 more