Skip to content
Threat Feed
Subscribe

Vendor

389 Directory Server

2 briefs RSS
high advisory

Heap Buffer Overflow in 389 Directory Server SASL I/O Layer

A heap buffer overflow vulnerability in the SASL I/O layer of 389-ds-base allows a remote authenticated attacker to trigger an unsigned subtraction underflow and cause memory corruption.

389-ds-base
1t 2c
critical advisory

Authentication Bypass in 389 Directory Server via SASL Bind State Confusion

A vulnerability in 389 Directory Server allows unauthenticated attackers to elevate privileges by exploiting state confusion during SASL authentication, leading to unauthorized Directory Manager access.

389 Directory Server authentication-bypass cve-2026-18922 privilege-escalation
1t 1c