RH
Product
Red Hat Directory Server 13
27
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 2High 5Medium 18Low 2
Watch
Add Red Hat Directory Server 13 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-86344 | 7.5 | Oct 1 | 389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue Affected: All versions, or not specified |
| CVE-2026-11770 | 7.5 | Jul 31 | 389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check Affected: All versions, or not specified |
| CVE-2026-11788 | 7.5 | Jun 9 | 389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser Affected: All versions, or not specified |
| CVE-2026-9064 | 7.5 | May 20 | 389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos) Affected: All versions, or not specified |
| CVE-2025-14905 | 7.2 | Feb 23 | 389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow Affected: All versions, or not specified |
Showing 5