CVE-2011-0019: Fedoraproject 389 Directory Server

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

slapd (aka ns-slapd) in 389 Directory Server 1.2.7.5 (aka Red Hat Directory Server 8.2.x or dirsrv) does not properly handle simple paged result searches, which allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via multiple search requests.

Affected products

• Fedoraproject 389 Directory Server: version 1.2.7.5 only
• Red Hat Directory Server: version 8.2 only; version 8.2.3 only

Published 2011-02-23. Last modified 2026-06-16.