Medium severity5.9NVD Advisory· Published Jun 9, 2026· Updated Aug 18, 2026
CVE-2026-11788
CVE-2026-11788
Description
A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
18cpe:2.3:a:redhat:directory_server:11.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:redhat:directory_server:11.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:directory_server:12.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:directory_server:13.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:389_directory_server:-:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
- osv-coords9 versionspkg:rpm/almalinux/389-ds-basepkg:rpm/almalinux/389-ds-base-bdbpkg:rpm/almalinux/389-ds-base-develpkg:rpm/almalinux/389-ds-base-legacy-toolspkg:rpm/almalinux/389-ds-base-libspkg:rpm/almalinux/389-ds-base-snmppkg:rpm/almalinux/python3-lib389pkg:rpm/opensuse/389-ds&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/389-ds&distro=openSUSE%20Tumbleweed
< 2.8.0-9.el9_8+ 8 more
- (no CPE)range: < 2.8.0-9.el9_8
- (no CPE)range: < 3.2.0-9.el10_2
- (no CPE)range: < 2.8.0-9.el9_8
- (no CPE)range: < 1.4.3.39-26.module_el8.10.0+4254+e9c4b400
- (no CPE)range: < 2.8.0-9.el9_8
- (no CPE)range: < 2.8.0-9.el9_8
- (no CPE)range: < 2.8.0-9.el9_8
- (no CPE)range: < 3.0.6~git382.7a51ea5f5-160000.1.1
- (no CPE)range: < 3.2.2+4b41542b2-1.1
Patches
Vulnerability mechanics
References
17- access.redhat.com/security/cve/CVE-2026-11788nvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor Advisory
- access.redhat.com/errata/RHSA-2026:55421nvd
- access.redhat.com/errata/RHSA-2026:55422nvd
- access.redhat.com/errata/RHSA-2026:55423nvd
- access.redhat.com/errata/RHSA-2026:55424nvd
- access.redhat.com/errata/RHSA-2026:55425nvd
- access.redhat.com/errata/RHSA-2026:55426nvd
- access.redhat.com/errata/RHSA-2026:55530nvd
- access.redhat.com/errata/RHSA-2026:55532nvd
- access.redhat.com/errata/RHSA-2026:55756nvd
- access.redhat.com/errata/RHSA-2026:55757nvd
- access.redhat.com/errata/RHSA-2026:55758nvd
- access.redhat.com/errata/RHSA-2026:55794nvd
- access.redhat.com/errata/RHSA-2026:56047nvd
- access.redhat.com/errata/RHSA-2026:56048nvd
- access.redhat.com/errata/RHSA-2026:56050nvd
News mentions
0No linked articles in our index yet.