High severity7.5NVD Advisory· Published Sep 7, 2026· Updated Oct 8, 2026
CVE-2026-18453
CVE-2026-18453
Description
A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of op_shared_search allows an unauthenticated remote attacker to crash the LDAP server by sending a crafted sequence of search requests using the USE_ONE_BACKEND control, resulting in denial of service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10- osv-coords9 versionspkg:rpm/almalinux/389-ds-basepkg:rpm/almalinux/389-ds-base-bdbpkg:rpm/almalinux/389-ds-base-develpkg:rpm/almalinux/389-ds-base-legacy-toolspkg:rpm/almalinux/389-ds-base-libspkg:rpm/almalinux/389-ds-base-snmppkg:rpm/almalinux/python3-lib389pkg:rpm/opensuse/389-ds&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/389-ds&distro=openSUSE%20Tumbleweed
< 2.8.0-10.el9_8+ 8 more
- (no CPE)range: < 2.8.0-10.el9_8
- (no CPE)range: < 3.2.0-10.el10_2
- (no CPE)range: < 2.8.0-10.el9_8
- (no CPE)range: < 1.4.3.39-28.module_el8.10.0+4274+00f9a3f1
- (no CPE)range: < 2.8.0-10.el9_8
- (no CPE)range: < 2.8.0-10.el9_8
- (no CPE)range: < 2.8.0-10.el9_8
- (no CPE)range: < 3.0.7~git2.2846d5288-160000.1.1
- (no CPE)range: < 3.3.1+8c2711bd6-1.1
Patches
Vulnerability mechanics
References
19- access.redhat.com/errata/RHSA-2026:64771nvd
- access.redhat.com/errata/RHSA-2026:64776nvd
- access.redhat.com/errata/RHSA-2026:64778nvd
- access.redhat.com/errata/RHSA-2026:64779nvd
- access.redhat.com/errata/RHSA-2026:64780nvd
- access.redhat.com/errata/RHSA-2026:64781nvd
- access.redhat.com/errata/RHSA-2026:64783nvd
- access.redhat.com/errata/RHSA-2026:64784nvd
- access.redhat.com/errata/RHSA-2026:64785nvd
- access.redhat.com/errata/RHSA-2026:64789nvd
- access.redhat.com/errata/RHSA-2026:64790nvd
- access.redhat.com/errata/RHSA-2026:64791nvd
- access.redhat.com/errata/RHSA-2026:64792nvd
- access.redhat.com/errata/RHSA-2026:64793nvd
- access.redhat.com/errata/RHSA-2026:64804nvd
- access.redhat.com/errata/RHSA-2026:65119nvd
- access.redhat.com/errata/RHSA-2026:79217nvd
- access.redhat.com/security/cve/CVE-2026-18453nvd
- bugzilla.redhat.com/show_bug.cginvd
News mentions
0No linked articles in our index yet.