Red Hat Directory Server und Enterprise Linux (389-ds-base): Mehrere Schwachstellen

Summary

Product

Vulnerabilities 5

• Critical 9.8
  CVE-2026-18922

  389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary property

  A flaw was found in 389 Directory Server. During SASL PLAIN authentication, a stale identity carried in a Cyrus SASL auxiliary property from a prior failed bind attempt can be installed on a connection following a subsequent, unrelated successful bind, regard…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Azure Linux
  Sep 7, 2026
• High 8.4
  CVE-2026-19843 Public exploit

  389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor

  A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell command string without proper escaping. An LDAP user with delegated privileges to create …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Sep 7, 2026
• High 7.5
  CVE-2026-18355

  389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet()

  A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), the wrapped-record length read from the wire is validated only against an upper bound. A small wire length (0, 1, or 2) produces an e…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux
  Sep 7, 2026
• High 7.5
  CVE-2026-18453

  389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search

  A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of op_shared_search allows an unauthenticated remote attacker to crash the LDAP server by sending a crafted sequence of search requests using the USE_ONE_BACK…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux
  Sep 7, 2026
• High 7.5
  CVE-2026-76560

  389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn

  A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN against an empty stored attribute value, allowing an unauthenticated client to satisfy access control checks intended to …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux
  Sep 7, 2026

Revision history

1. 2026-10-29 #11

   Neue Updates von SUSE aufgenommen

2. 2026-10-14 #10

   Neue Updates von Oracle Linux aufgenommen

3. 2026-10-08 #9

   Neue Updates von Red Hat aufgenommen

4. 2026-09-29 #8

   Neue Updates von SUSE aufgenommen

5. 2026-09-28 #7

   Neue Updates von Amazon und SUSE aufgenommen

6. 2026-09-27 #6

   Neue Updates von openSUSE aufgenommen

7. 2026-09-13 #5

   Neue Updates von openSUSE aufgenommen

8. 2026-09-10 #4

   Neue Updates von Oracle Linux aufgenommen

9. 2026-09-09 #3

   Neue Updates von Rocky Enterprise Software Foundation und Amazon aufgenommen

10. 2026-09-08 #2

    Neue Updates von Oracle Linux aufgenommen

11. 2026-09-07 #1

    Initiale Fassung

References

• Red Hat Security Advisory RHSA-2026:64768 vom 2026-09-07
  https://access.redhat.com/errata/RHSA-2026:64768
• Red Hat Security Advisory RHSA-2026:64769 vom 2026-09-07
  https://access.redhat.com/errata/RHSA-2026:64769
• Red Hat Security Advisory RHSA-2026:64782 vom 2026-09-07
  https://access.redhat.com/errata/RHSA-2026:64782
• Red Hat Security Advisory RHSA-2026:64771 vom 2026-09-07
  https://access.redhat.com/errata/RHSA-2026:64771
• Red Hat Security Advisory RHSA-2026:64776 vom 2026-09-07
  https://access.redhat.com/errata/RHSA-2026:64776
• Red Hat Security Advisory RHSA-2026:64778 vom 2026-09-07
  https://access.redhat.com/errata/RHSA-2026:64778
• Red Hat Security Advisory RHSA-2026:64779 vom 2026-09-07
  https://access.redhat.com/errata/RHSA-2026:64779
• Red Hat Security Advisory RHSA-2026:64780 vom 2026-09-07
  https://access.redhat.com/errata/RHSA-2026:64780
• Red Hat Security Advisory RHSA-2026:64781 vom 2026-09-07
  https://access.redhat.com/errata/RHSA-2026:64781
• Red Hat Security Advisory RHSA-2026:64789 vom 2026-09-07
  https://access.redhat.com/errata/RHSA-2026:64789
• Red Hat Security Advisory RHSA-2026:64792 vom 2026-09-07
  https://access.redhat.com/errata/RHSA-2026:64792
• Red Hat Security Advisory RHSA-2026:64793 vom 2026-09-07
  https://access.redhat.com/errata/RHSA-2026:64793
• Red Hat Security Advisory RHSA-2026:64785 vom 2026-09-08
  https://access.redhat.com/errata/RHSA-2026:64785
• Red Hat Security Advisory RHSA-2026:64804 vom 2026-09-08
  https://access.redhat.com/errata/RHSA-2026:64804
• Red Hat Security Advisory RHSA-2026:64791 vom 2026-09-08
  https://access.redhat.com/errata/RHSA-2026:64791
• Red Hat Security Advisory RHSA-2026:64811 vom 2026-09-08
  https://access.redhat.com/errata/RHSA-2026:64811
• Red Hat Security Advisory RHSA-2026:64790 vom 2026-09-08
  https://access.redhat.com/errata/RHSA-2026:64790
• Oracle Linux Security Advisory ELSA-2026-64784 vom 2026-09-08
  https://linux.oracle.com/errata/ELSA-2026-64784-0.html
• Oracle Linux Security Advisory ELSA-2026-64785 vom 2026-09-08
  https://linux.oracle.com/errata/ELSA-2026-64785-0.html
• Rocky Linux Security Advisory RLSA-2026:64791 vom 2026-09-09
  https://errata.build.resf.org/RLSA-2026:64791
• Rocky Linux Security Advisory RLSA-2026:64784 vom 2026-09-09
  https://errata.build.resf.org/RLSA-2026:64784
• Amazon Linux Security Advisory ALAS2-2026-3909 vom 2026-09-09
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3909.html
• Rocky Linux Security Advisory RLSA-2026:64785 vom 2026-09-09
  https://errata.build.resf.org/RLSA-2026:64785
• Oracle Linux Security Advisory ELSA-2026-64791 vom 2026-09-10
  https://linux.oracle.com/errata/ELSA-2026-64791-0.html
• openSUSE Security Update OPENSUSE-SU-2026:11739-1 vom 2026-09-12
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OO2XUMAZDWAYTEN72PTY73A7QOVZZPSQ/
• openSUSE Security Update OPENSUSE-SU-2026:21950-1 vom 2026-09-25
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6KUXRCBYG6C3BARUFT5SVVKDYVDM4VV4/
• Amazon Linux Security Advisory ALAS2-2026-3956 vom 2026-09-29
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3956.html
• Amazon Linux Security Advisory ALAS2-2026-3957 vom 2026-09-29
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3957.html
• SUSE Security Update SUSE-SU-2026:4380-1 vom 2026-09-28
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/029421.html
• SUSE Security Update SUSE-SU-2026:23916-1 vom 2026-09-29
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/029462.html
• Red Hat Security Advisory RHSA-2026:79217 vom 2026-10-08
  https://access.redhat.com/errata/RHSA-2026:79217
• Oracle Linux Security Advisory ELSA-2026-64771 vom 2026-10-15
  https://linux.oracle.com/errata/ELSA-2026-64771-0.html
• SUSE Security Update SUSE-SU-2026:4932-1 vom 2026-10-29
  https://lists.suse.com/pipermail/sle-security-updates/2026-October/030245.html
• SUSE Security Update SUSE-SU-2026:4929-1 vom 2026-10-29
  https://lists.suse.com/pipermail/sle-security-updates/2026-October/030248.html