389-ds-base

Direct Vulnerabilities

Known vulnerabilities in the 389-ds-base package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M LDAP Injection	*
H Stack-based Buffer Overflow	*
M Insufficient Granularity of Access Control	*
M Heap-based Buffer Overflow	*
M Not Using a Random IV with CBC Mode	*
H Heap-based Buffer Overflow	*
L Out-of-bounds Write	*
M Heap-based Buffer Overflow	*
M Integer Underflow	*
L Stack-based Buffer Overflow	*
L Out-of-bounds Read	*
M NULL Pointer Dereference	*
M Buffer Over-read	*
H Allocation of Resources Without Limits or Throttling	*
M Heap-based Buffer Overflow	*
M NULL Pointer Dereference	*
M Improper Validation of Consistency within Input	*
M Improper Input Validation	*
H Improper Input Validation	*
M Heap-based Buffer Overflow	*
M NULL Pointer Dereference	*
M Authorization Bypass Through User-Controlled Key	*
L Improper Authentication	*
M Access of Uninitialized Pointer	*
H Heap-based Buffer Overflow	<0:1.2.11.15-95.el6_9
H Authentication Bypass	<0:1.2.11.15-32.el6_5
H Buffer Overflow	<0:1.2.11.15-94.el6_9
H Improper Authentication	<0:1.2.11.15-94.el6_9
H Improper Input Validation	<0:1.2.11.15-30.el6_5
H Improper Input Validation	<0:1.2.11.15-22.el6_4
M Access Restriction Bypass	<0:1.2.11.15-20.el6_4
H Out-of-Bounds	<0:1.2.11.15-91.el6_9
L Access Restriction Bypass	<0:1.2.11.15-14.el6_4
M Covert Timing Channel	<0:1.2.11.15-84.el6_8
M Information Exposure	<0:1.2.11.15-84.el6_8
M Information Exposure	<0:1.2.11.15-84.el6_8
M Numeric Errors	<0:1.2.11.15-12.el6_4
M Access Restriction Bypass	<0:1.2.11.15-11.el6
M Cryptographic Issues	<0:1.2.10.2-18.el6_3
M Cryptographic Issues	<0:1.2.10.2-18.el6_3
L Access Restriction Bypass	<0:1.2.10.2-15.el6
H File and Directory Information Exposure	<0:1.2.11.15-50.el6_6
H Exposure of Sensitive Information Through Metadata	<0:1.2.11.15-34.el6_5
M Information Exposure	*
M NULL Pointer Dereference	*
H Incorrect Permission Assignment for Critical Resource	*
M Missing Release of Resource after Effective Lifetime	*
M Resource Exhaustion	*
M Improper Input Validation	*
M Resource Exhaustion	*
M Race Condition	*
M Cleartext Storage of Sensitive Information	*
M Information Exposure	*
L Improper Authentication	*

Vulnerability

Vulnerable Version

LDAP Injection