High severity7.5NVD Advisory· Published Jul 31, 2026· Updated Aug 18, 2026
CVE-2026-15722
CVE-2026-15722
Description
A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP server by sending a crafted StartNSDS50ReplicationRequest extended operation containing a replica ID field with more than 16 digit characters. The overflow occurs during payload decoding, before any authorization check. Stack protectors limit impact to denial of service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
17cpe:2.3:a:redhat:directory_server:11.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:redhat:directory_server:11.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:directory_server:12.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:389_directory_server:-:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
- osv-coords8 versionspkg:rpm/almalinux/389-ds-basepkg:rpm/almalinux/389-ds-base-bdbpkg:rpm/almalinux/389-ds-base-develpkg:rpm/almalinux/389-ds-base-legacy-toolspkg:rpm/almalinux/389-ds-base-libspkg:rpm/almalinux/389-ds-base-snmppkg:rpm/almalinux/python3-lib389pkg:rpm/opensuse/389-ds&distro=openSUSE%20Tumbleweed
< 2.8.0-9.el9_8+ 7 more
- (no CPE)range: < 2.8.0-9.el9_8
- (no CPE)range: < 3.2.0-9.el10_2
- (no CPE)range: < 2.8.0-9.el9_8
- (no CPE)range: < 1.4.3.39-26.module_el8.10.0+4254+e9c4b400
- (no CPE)range: < 2.8.0-9.el9_8
- (no CPE)range: < 2.8.0-9.el9_8
- (no CPE)range: < 2.8.0-9.el9_8
- (no CPE)range: < 3.3.1+8c2711bd6-1.1
Patches
Vulnerability mechanics
References
17- access.redhat.com/security/cve/CVE-2026-15722nvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor Advisory
- access.redhat.com/errata/RHSA-2026:55421nvd
- access.redhat.com/errata/RHSA-2026:55422nvd
- access.redhat.com/errata/RHSA-2026:55423nvd
- access.redhat.com/errata/RHSA-2026:55424nvd
- access.redhat.com/errata/RHSA-2026:55425nvd
- access.redhat.com/errata/RHSA-2026:55426nvd
- access.redhat.com/errata/RHSA-2026:55530nvd
- access.redhat.com/errata/RHSA-2026:55532nvd
- access.redhat.com/errata/RHSA-2026:55756nvd
- access.redhat.com/errata/RHSA-2026:55757nvd
- access.redhat.com/errata/RHSA-2026:55758nvd
- access.redhat.com/errata/RHSA-2026:55794nvd
- access.redhat.com/errata/RHSA-2026:56047nvd
- access.redhat.com/errata/RHSA-2026:56048nvd
- access.redhat.com/errata/RHSA-2026:56050nvd
News mentions
0No linked articles in our index yet.