A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the L…
Medium CVSS 5.9
Summary
A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://access.redhat.com/errata/RHSA-2026:55421
- https://access.redhat.com/errata/RHSA-2026:55422
- https://access.redhat.com/errata/RHSA-2026:55425
- https://access.redhat.com/security/cve/CVE-2026-11788 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2485423 Issue Tracking
- https://access.redhat.com/errata/RHSA-2026:55426
Timeline
- nvd_ingest NVD