CVE-2026-11787
EUVD-2026-3541909.06.2026, 14:16
A flaw was found in 389 Directory Server. The ldap_utf8prev() function reads bytes before the start of a buffer without bounds checking, causing a heap buffer over-read in string filter parsing that may influence internal filter processing behavior.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| redhat | directory_server | 11.0 |
| redhat | directory_server | 12.0 |
| redhat | directory_server | 13.0 |
| redhat | 389_directory_server | - |
| redhat | enterprise_linux | 7.0 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
| redhat | enterprise_linux | 10.0 |
𝑥
= Vulnerable software versions
Debian Releases
Common Weakness Enumeration