CVE-2026-11788
EUVD-2026-3542009.06.2026, 14:16
A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| redhat | directory_server | 11.0 |
| redhat | directory_server | 12.0 |
| redhat | directory_server | 13.0 |
| redhat | 389_directory_server | - |
| redhat | enterprise_linux | 7.0 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
| redhat | enterprise_linux | 10.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Red Hat Enterprise Linux Releases
Common Weakness Enumeration
References