Known vulnerabilities in 389-ds-base (Red Hat package)
Vendor:
Red Hat Inc.
Software:
389-ds-base (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:389-ds-base_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
14
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
2.6.1-22.el9_6
3.0.6-19.el10_0
2.2.4-19.el9_2
1.3.11.1-13.el7_9
2.4.5-26.el9_4
2.8.0-8.el9_8
3.0.6-18.el10_0
3.2.0-7.el10_2
2.6.1-21.el9_6
2.4.5-25.el9_4
2.8.0-7.el9_8
1.3.11.1-12.el7_9
2.2.4-18.el9_2
1.3.11.1-11.el7_9
2.2.4-17.el9_2
2.0.14-5.el9_0
2.6.1-20.el9_6
3.0.6-17.el10_0
3.1.3-7.el10_1
2.7.0-10.el9_7
2.6.1-8.el9_6
2.5.2-9.el9_5
1.3.11.1-7.el7_9
1.3.11.1-6.el7_9
2.4.5-9.el9_4
2.2.4-9.el9_2
1.3.3.1-20.el7_1
1.3.3.1-16.el7_1
2.4.5-8.el9_4
1.3.11.1-5.el7_9
2.0.14-3.el9_0
2.1.3-4.el9_1
1.3.10.2-17.el7_9
1.3.10.2-16.el7_9
1.4.3.29-3.module+el8dsrv+14615+a86efbbf
1.3.10.2-15.el7_9
1.3.10.2-13.el7_9
1.3.10.2-12.el7_9
1.3.9.1-12.el7_7
1.3.8.4-25.1.el7_6
1.3.7.5-30.el7_5
1.3.7.5-29.el7_5
1.3.8.4-15.el7
1.3.7.5-28.el7_5
1.3.7.5-21.el7_5
1.3.6.1-28.el7_4
1.3.6.1-26.el7_4
1.3.6.1-19.el7_4
1.3.1.6-26.el7_0
1.3.3.1-13.el7
1.3.4.0-26.el7_2
1.3.5.10-11.el7
1.3.5.10-20.el7_3
1.2.11.15-97.el6_10
1.2.11.15-95.el6_9
1.2.11.15-94.el6_9
1.2.11.15-91.el6_9
1.2.11.15-89.el6
1.2.11.15-85.el6_8
1.2.11.15-84.el6_8
1.2.11.15-75.el6_8
1.2.11.15-74.el6
1.2.11.15-72.el6_7
1.2.11.15-69.el6_7
1.2.11.15-68.el6_7
1.2.11.15-65.el6_7
1.2.11.15-62.el6_7
1.2.11.15-60.el6
1.2.11.15-50.el6_6
1.2.11.15-48.el6_6
1.2.11.15-47.el6
1.2.11.15-46.el6
1.2.11.15-45.el6
1.2.11.15-34.el6_5
1.2.11.15-33.el6_5
1.2.11.15-32.el6_5
1.2.11.15-31.el6_5
1.2.11.15-30.el6_5
1.2.11.15-29.el6
1.2.11.15-22.el6_4
1.2.11.15-20.el6_4
1.2.11.15-14.el6_4
1.2.11.15-12.el6_4
1.2.11.15-11.el6
1.2.10.2-20.el6_3
1.2.10.2-18.el6_3
1.2.10.2-15.el6
1.2.9.14-1.el6_2
1.2.9.14-1.el6
1.2.8.2-1.el6_1
1.2.8.2-1.el6
Vulnerabilities (14)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU123263 - Heap-based Buffer Overflow CVE-2025-14905 |
CWE-122 | Low | 1.3.11.1-11.el7_9, 2.0.14-5.el9_0, 2.2.4-17.el9_2, 2.6.1-20.el9_6, 2.7.0-10.el9_7, 3.0.6-17.el10_0, 3.1.3-7.el10_1 | 25.02.2026 |
SB2026022544 SB2026022547 SB2026022548 and 16 more |
||
| #VU106055 - NULL Pointer Dereference CVE-2025-2487 |
CWE-476 | Low | 2.5.2-9.el9_5, 2.6.1-8.el9_6 | 26.03.2025 |
SB2025032629 SB20250403103 SB20250403104 and 2 more |
||
| #VU97939 - Improper input validation CVE-2024-8445 |
CWE-20 | Medium | 1.3.11.1-7.el7_9 | 02.10.2024 |
SB2024100204 SB2024100205 SB2025022462 and 3 more |
||
| #VU95534 - Improper input validation CVE-2024-6237 |
CWE-20 | Medium | 2.4.5-9.el9_4 | 08.08.2024 |
SB2024080821 SB2024080822 SB2024081204 and 1 more |
||
| #VU94615 - Improper input validation CVE-2024-5953 |
CWE-20 | Low | 1.3.11.1-6.el7_9, 2.2.4-9.el9_2, 2.4.5-9.el9_4 | 19.07.2024 |
SB2024071926 SB2024071931 SB2024080577 and 25 more |
||
| #VU93312 - Improper input validation CVE-2024-3657 |
CWE-20 | Medium | 1.3.11.1-5.el7_9, 2.2.4-9.el9_2, 2.4.5-8.el9_4 | 25.06.2024 |
SB20240625103 SB20240625104 SB20240625105 and 22 more |
||
| #VU93311 - Improper input validation CVE-2024-2199 |
CWE-20 | Medium | 1.3.11.1-5.el7_9, 2.2.4-9.el9_2, 2.4.5-8.el9_4 | 25.06.2024 |
SB20240625102 SB20240625104 SB20240625105 and 24 more |
||
| #VU87107 - Heap-based Buffer Overflow CVE-2024-1062 |
CWE-122 | Low | 2.2.4-9.el9_2 | 05.03.2024 |
SB2024030509 SB20240312217 SB2024031864 and 13 more |
||
| #VU66990 - NULL Pointer Dereference CVE-2022-2850 |
CWE-476 | Medium | 1.3.10.2-17.el7_9, 2.0.14-3.el9_0, 2.1.3-4.el9_1 | 06.09.2022 |
SB2022090601 SB2022090606 SB2022091702 and 11 more |
||
| #VU64661 - Insufficient Session Expiration CVE-2022-0996 |
CWE-613 | Medium | 1.3.10.2-16.el7_9, 2.0.14-3.el9_0, 2.1.3-4.el9_1 | 24.06.2022 |
SB2022062433 SB2022062933 SB2022072073 and 13 more |
||
| #VU63128 - Memory corruption CVE-2022-0918 |
CWE-119 | Medium | 1.3.10.2-16.el7_9, 1.4.3.29-3.module+el8dsrv+14615+a86efbbf, 2.0.14-3.el9_0, 2.1.3-4.el9_1 | 12.05.2022 |
SB2022051236 SB2022051237 SB2022062433 and 13 more |
||
| #VU60867 - Use After Free CVE-2021-4091 |
CWE-416 | Medium | 1.3.10.2-15.el7_9 | 25.02.2022 |
SB2022022501 SB2022022502 SB2022022528 and 11 more |
||
| #VU55334 - Improper Authentication CVE-2021-3652 |
CWE-287 | Medium | 1.3.10.2-13.el7_9 | 27.07.2021 |
SB2021072715 SB2021072716 SB2021081121 and 11 more |
||
| #VU54105 - Exposure of sensitive information to an unauthorized actor CVE-2020-35518 |
CWE-200 | Medium | 1.3.10.2-12.el7_9 | 15.06.2021 |
SB2021061502 SB2021061505 SB2021062118 and 12 more |