Description
Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 13 | 389-ds-base | 1.3.2.21-1 | — |
| Debian 12 | 389-ds-base | 1.3.2.21-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | 389-ds-base +2 | 1.3.1.6-26.el7_0 | RHSA-2014:1031 |
| RHEL 6 | 389-ds-base +2 | 1.2.11.15-34.el6_5 | RHSA-2014:1031 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Directory Server 8 | redhat-ds-base +1 | 8.2.11-15.el5dsrv | RHSA-2014:1032 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | 389-ds-base +2 | 1.3.1.6-26.el7_0 | ELSA-2014-1031 |
Advisories 3
- RHSA-2014:1031 Red Hat Security Advisory: 389-ds-base security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2014:1032 Red Hat Security Advisory: redhat-ds-base security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- ELSA-2014-1031 Important: 389-ds-base security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Aug 7, 2014
References
- RHSA-2014:1031 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1123477
- RHSA-2014:1032 vendor-advisory