CVE-2020-35518

概要

参考情報

• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• 389ds/389-ds-base commit b6aae4d · Patch
• 389ds/389-ds-base commit cc0f692 · Patch
• 389ds/389-ds-base · Patch

directory server のその他の脆弱性

• CVE-2026-18651中 5.4A flaw was found in 389 Directory Server. During SASL PLAIN authentication, the server installs connection-level bind credentials before per…
• CVE-2026-15722高 7.5A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copie…
• CVE-2026-11770高 7.5A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication…
• CVE-2026-15041低 3.7A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password verification function uses standard memcmp() for comparing password has…
• CVE-2026-14969中 4.4A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for AES-CBC and 3D…