Threats Tagged 'cve-2026-9064'

Red Hat Directory Server is an LDAPv3-compliant directory server. The image is maintained by Red Hat and updated regularly. To pull this container image, run the following command: podman pull registry.redhat.io/dirsrv/dirsrv-container-rhel10:13.2

Multiple security vulnerabilities have been identified in the Hewlett-Packard Linux Imaging and Printing Project (HPLIP) packages included with Red Hat Enterprise Linux (RHEL) versions 8 and 9. These vulnerabilities include privilege escalation and arbitrary code execution via operating system command injection and integer overflow in the hpcups component. Red Hat has released security updates addressing these issues for various architectures and extended support versions of RHEL 8 and 9.

A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function in the LDAP server does not enforce an upper bound on the number of controls per LDAP message. A remote, unauthenticated attacker can send a specially crafted LDAP request containing hundreds of thousands of minimal controls within the default maximum BER message size (2 MB), causing excessive CPU consumption and heap allocation on the server. Under concurrent exploitation, this leads to significant latency degradation, worker thread starvation, or out-of-memory termination, resulting in a denial of service.