Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-15041— 389-ds-base: 389-ds-base: non-constant-time comparison in pbkdf2-sha256 password verification

Quick assessment

Affected
Red Hat Red Hat Directory Server 11
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

389 Directory Server是389 Directory Server团队开源的一个高度可用、功能齐全、可靠和安全的LDAP服务器实现。 389 Directory Server存在侧信道信息泄露漏洞，该漏洞源于PBKDF2-SHA256密码验证函数使用标准memcmp()比较密码哈希值而非恒定时间比较函数，可能导致远程攻击者通过LDAP绑定尝试的时间测量推断部分哈希信息。

CVSS 3.7 · Low EPSS 0.36% · P27

Possible ATT&CK Techniques 1 AI

T1552.005 · Cloud Instance Metadata API

Affected Version Matrix 8

VendorProduct Version RangeStatus
Red Hat Red Hat Directory Server 11 any affected
Red Hat Red Hat Directory Server 12 any affected
Red Hat Red Hat Directory Server 13 any affected
Red Hat Red Hat Enterprise Linux 10 any affected
Red Hat Red Hat Enterprise Linux 6 any unaffected
Red Hat Red Hat Enterprise Linux 7 any affected
Red Hat Red Hat Enterprise Linux 8 any affected
Red Hat Red Hat Enterprise Linux 9 any affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-15041

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
389-ds-base: 389-ds-base: non-constant-time comparison in pbkdf2-sha256 password verification
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password verification function uses standard memcmp() for comparing password hashes instead of a constant-time comparison function. A remote attacker could potentially use timing measurements of LDAP bind attempts to infer partial hash information, though practical exploitation is extremely difficult due to PBKDF2 computational overhead.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过时间差异性导致的信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
389 Directory Server 侧信道信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
389 Directory Server是389 Directory Server团队开源的一个高度可用、功能齐全、可靠和安全的LDAP服务器实现。 389 Directory Server存在侧信道信息泄露漏洞，该漏洞源于PBKDF2-SHA256密码验证函数使用标准memcmp()比较密码哈希值而非恒定时间比较函数，可能导致远程攻击者通过LDAP绑定尝试的时间测量推断部分哈希信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Red Hat Red Hat Directory Server 11 - cpe:/a:redhat:directory_server:11
Red Hat Red Hat Directory Server 12 - cpe:/a:redhat:directory_server:12
Red Hat Red Hat Directory Server 13 - cpe:/a:redhat:directory_server:13
Red Hat Red Hat Enterprise Linux 10 - cpe:/o:redhat:enterprise_linux:10
Red Hat Red Hat Enterprise Linux 6 - cpe:/o:redhat:enterprise_linux:6
Red Hat Red Hat Enterprise Linux 7 - cpe:/o:redhat:enterprise_linux:7
Red Hat Red Hat Enterprise Linux 8 - cpe:/o:redhat:enterprise_linux:8
Red Hat Red Hat Enterprise Linux 9 - cpe:/o:redhat:enterprise_linux:9

II. Public POCs for CVE-2026-15041

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-15041

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-15041 (2)

IV. Related Vulnerabilities

Same product: Red Hat Directory Server 11
Same vendor: Red Hat
Same weakness: CWE-208

V. Comments for CVE-2026-15041

No comments yet

Leave a comment