CVE-2010-4746: Multiple memory leaks in the normalization functionality in 389 Directory Server before 1.2.7.5 allow remot...

Security readout for executives and security teams

CVE-2010-4746 is a denial-of-service flaw in 389 Directory Server before 1.2.7.5. Remote clients could trigger memory leaks in normalization handling, causing memory consumption and potential service disruption. The sources do not show active exploitation or provide a CVSS score. Exposure is most likely where 389 Directory Server versions earlier than 1.2.7.5 are reachable by untrusted or semi-trusted clients. Structured affected-product metadata is incomplete, so confirm exposure from installed package versions and vendor advisories. Treat this as a service-availability risk for legacy 389 Directory Server deployments. Prioritize confirmation and upgrade for internet-facing or business-critical directory services, but there is no source-backed evidence of active exploitation. Mitigation focus: Upgrade 389 Directory Server to 1.2.7.5 or later where applicable.; Check Red Hat and Fedora 389 Directory Server guidance for package-specific fixes.; Restrict directory service exposure to trusted networks and clients..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.