CVE-2016-4992
Fixed in a distro release EPSS 2%
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to infer the existence of RDN component objects.
Products: redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_server, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | 389-ds-base | 1.3.5.13-1 |
| Debian 13 | 389-ds-base | 1.3.5.13-1 |
| Red Hat Enterprise Linux 6 | 389-ds-base | 0:1.2.11.15-84.el6_8 |
| Red Hat Enterprise Linux 6 | 389-ds-base-debuginfo | 0:1.2.11.15-84.el6_8 |
| Red Hat Enterprise Linux 6 | 389-ds-base-devel | 0:1.2.11.15-84.el6_8 |
| Red Hat Enterprise Linux 6 | 389-ds-base-libs | 0:1.2.11.15-84.el6_8 |
| Red Hat Enterprise Linux 7 | 389-ds-base | 0:1.3.5.10-11.el7 |
| Red Hat Enterprise Linux 7 | 389-ds-base-debuginfo | 0:1.3.5.10-11.el7 |
| Red Hat Enterprise Linux 7 | 389-ds-base-devel | 0:1.3.5.10-11.el7 |
| Red Hat Enterprise Linux 7 | 389-ds-base-libs | 0:1.3.5.10-11.el7 |
| Red Hat Enterprise Linux 7 | 389-ds-base-snmp | 0:1.3.5.10-11.el7 |
| Ubuntu 26.04 LTS | 389-ds-base | no fix |
| Ubuntu 26.10 | 389-ds-base | no fix |
| Ubuntu Pro 16.04 LTS | 389-ds-base | no fix |
| openSUSE Tumbleweed | 389-ds | 2.0.10~git0.21dd2802c-1.1 |