CVE-2013-4485: Fedoraproject 389 Directory Server

Medium severity, CVSS 4.0. EPSS: 2% chance of exploitation in the next 30 days.

389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote authenticated users to cause a denial of service (crash) via multiple @ characters in a GER attribute list in a search request.

Affected products

• Fedoraproject 389 Directory Server: version 1.2.11.15 only
• Red Hat Directory Server: up to and including 8.2; version 7.1 only; version 8.0 only; version 8.1 only
• Red Hat Enterprise Linux: version 6.0 only

Published 2013-11-23. Last modified 2026-06-16.