CVE-2015-1854: Debian Linux

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call.

Affected products

• Debian Debian Linux: version 8.0 only
• Fedoraproject 389 Directory Server: up to and including 1.3.3.9
• Fedoraproject Fedora: version 22 only

Published 2017-09-19. Last modified 2026-06-17.