Search for packages
| purl | pkg:deb/debian/389-ds-base@2.3.1%2Bdfsg1-1%2Bdeb12u1 |
| Next non-vulnerable version | 3.1.2+dfsg1-1 |
| Latest non-vulnerable version | 3.1.2+dfsg1-1 |
| Risk | 3.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-6f2q-qatg-kucr
Aliases: CVE-2024-6237 |
389-ds-base: unauthenticated user can trigger a DoS by sending a specific extended search request |
Affected by 0 other vulnerabilities. |
|
VCID-bpw5-xeju-93f3
Aliases: CVE-2023-1055 |
RHDS: LDAP browser tries to decode userPassword instead of userCertificate attribute |
Affected by 0 other vulnerabilities. |
|
VCID-kbvd-dfmn-buat
Aliases: CVE-2024-1062 |
389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) |
Affected by 0 other vulnerabilities. |
|
VCID-xs3r-chc9-27dr
Aliases: CVE-2025-2487 |
389-ds-base: null pointer dereference leads to denial of service |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-4tdy-umt6-4ubr | 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c |
CVE-2024-2199
|
| VCID-63rm-mq1r-5fbz | 389-ds-base: access control bypass by query (filter in LDAP terms) optimiser |
CVE-2022-1949
|
| VCID-77rw-db6h-hya9 | 389-ds-base: sending crafted message could result in DoS |
CVE-2022-0918
|
| VCID-hjvf-3mm8-xfhq | 389-ds-base: double free of the virtual attribute context in persistent search |
CVE-2021-4091
|
| VCID-knxk-357y-efhh | 389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed |
CVE-2021-3652
|
| VCID-qkca-awn5-hfas | 389-ds-base: server crash while modifying `userPassword` using malformed input (Incomplete fix for CVE-2024-2199) |
CVE-2024-8445
|
| VCID-qv4g-5kzs-9kfa | 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request |
CVE-2024-3657
|
| VCID-rffx-mwhe-tqe5 | 389-ds-base: Malformed userPassword hash may cause Denial of Service |
CVE-2024-5953
|
| VCID-vx15-pahy-ufbn | 389-ds-base: SIGSEGV in sync_repl |
CVE-2022-2850
|
| VCID-x8k9-na1n-8fgj | 389-ds-base: expired password was still allowed to access the database |
CVE-2022-0996
|