CVE-2026-19843
CVE-2026-19843 · 389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft a malicious DN containing shell metacharacters. When a Cockpit administrator subsequently views the entry in the 389 Console, the embedded shell command executes with root privileges on the directory server host.
CVSS 8.4 · High · EPSS 0.5%
- Published
- Updated
Stack: system
Affected products and versions
red hat directory server 11.5 e4s for rhel 8
- Versions
- ≥ 8060020260908152739.0ca98e7e: Not affected (rpm)
No fix published
red hat directory server 11.7 e4s for rhel 8
- Versions
- ≥ 8080020260903102346.f969626e: Not affected (rpm)
No fix published
red hat directory server 11.9 for rhel 8
- Versions
- ≥ 8100020260904171440.37ed7c03: Not affected (rpm)
No fix published
red hat directory server 12.2 e4s for rhel 9
- Versions
- ≥ 9020020260903155914.1674d574: Not affected (rpm)
No fix published
red hat directory server 12.4 e4s for rhel 9
- Versions
- ≥ 9040020260903102623.1674d574: Not affected (rpm)
No fix published
red hat directory server 12.6 eus for rhel 9
- Versions
- ≥ 9060020260903100230.1674d574: Not affected (rpm)
No fix published
red hat directory server 12.8 for rhel 9
- Versions
- ≥ 9080020260908092641.1674d574: Not affected (rpm)
No fix published
red hat directory server 13.0 eus for rhel 10
- Versions
- ≥ 0:3.0.6-4.el10dsrv: Not affected (rpm)
No fix published
red hat directory server 13.2 for rhel 10
- Versions
- ≥ 0:3.2.0-7.el10dsrv: Not affected (rpm)
No fix published
red hat directory server 11
No fix published
red hat directory server 12
No fix published
red hat enterprise linux 10
No fix published
red hat enterprise linux 6
No fix published
red hat enterprise linux 7
No fix published
red hat enterprise linux 8
No fix published
red hat enterprise linux 8
No fix published
red hat enterprise linux 9
No fix published
389-ds-base Debian:12
- Versions
- 2.3.1+dfsg1-1
- 2.3.1+dfsg1-1+deb12u1
- 2.3.4+dfsg1-1
- 2.3.4+dfsg1-1.1
- 2.4.4+dfsg1-1
- 2.4.4+dfsg1-3
- 2.4.5+dfsg1-1
- 3.0.2+dfsg1-1
- 3.1.1+dfsg1-1
- 3.1.1+dfsg1-2
- 3.1.1+dfsg1-3
- 3.1.2+dfsg1-1
- 3.1.2+vendor1-1
- 3.1.2+vendor1-2
- 3.3.0-1
- 3.3.0-2
- 3.3.1-1
- 3.3.1-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
389-ds-base Debian:13
- Versions
- 3.1.2+dfsg1-1
- 3.1.2+dfsg1-1+deb13u1
- 3.1.2+vendor1-1
- 3.1.2+vendor1-2
- 3.3.0-1
- 3.3.0-2
- 3.3.1-1
- 3.3.1-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
389-ds-base Ubuntu:Pro:16.04:LTS
- Versions
- 1.3.3.12-1build1
- 1.3.3.13-1
- 1.3.4.5-2
- 1.3.4.8-1
- 1.3.4.8-3
- 1.3.4.8-3ubuntu1
- 1.3.4.8-4
- 1.3.4.9-1
- 1.3.4.9-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
389-ds-base Ubuntu:Pro:18.04:LTS
- Versions
- 1.3.7.5-1
- 1.3.7.5-1build1
- 1.3.7.5-1build2
- 1.3.7.9-1
- 1.3.7.10-1
- 1.3.7.10-1ubuntu1
- 1.3.7.10-1ubuntu1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
389-ds-base Ubuntu:Pro:20.04:LTS
- Versions
- 1.4.1.6-4
- 1.4.1.6-4build1
- 1.4.2.4-1
- 1.4.2.4-1build1
- 1.4.3.2-1
- 1.4.3.2-1build1
- 1.4.3.6-2
- 1.4.3.6-2ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
389-ds-base Ubuntu:22.04:LTS
- Versions
- 1.4.4.11-2build1
- 1.4.4.11-2build2
- 1.4.4.17-1
- 2.0.11-2
- 2.0.14-1
- 2.0.15-1
- 2.0.15-1ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
389-ds-base Ubuntu:24.04:LTS
- Versions
- 2.3.4+dfsg1-1
- 2.4.4+dfsg1-1ubuntu1
- 2.4.4+dfsg1-1ubuntu4
- 2.4.4+dfsg1-3
- 2.4.5+dfsg1-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://access.redhat.com/errata/RHSA-2026:64768
- https://access.redhat.com/errata/RHSA-2026:64769
- https://access.redhat.com/errata/RHSA-2026:64779
- https://access.redhat.com/errata/RHSA-2026:64780
- https://access.redhat.com/errata/RHSA-2026:64782
- https://access.redhat.com/errata/RHSA-2026:64792
- https://access.redhat.com/errata/RHSA-2026:64793
- https://access.redhat.com/errata/RHSA-2026:65375
- https://access.redhat.com/errata/RHSA-2026:79217
- https://access.redhat.com/security/cve/CVE-2026-19843
- https://bugzilla.redhat.com/show_bug.cgi?id=2515965
- https://nvd.nist.gov/vuln/detail/CVE-2026-19843