CVE-2010-4746: Fedoraproject 389 Directory Server

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

Multiple memory leaks in the normalization functionality in 389 Directory Server before 1.2.7.5 allow remote attackers to cause a denial of service (memory consumption) via "badly behaved applications," related to (1) Slapi_Attr mishandling in the DN normalization code and (2) pointer mishandling in the syntax normalization code, a different issue than CVE-2011-0019.

Affected products

• Fedoraproject 389 Directory Server: up to and including 1.2.7; version 1.2.1 only; version 1.2.2 only; version 1.2.3 only; version 1.2.5 only; version 1.2.6 only; …

Published 2011-02-23. Last modified 2026-06-16.