Riskcovery

CVE-2026-11884

389-ds-base: 389-ds-base: heap buffer overflow in schema objectclass serialization due to missing oc_superior in size calculation

State
Published
Severity
6.5 Medium
Published
Jun 10, 2026
Updated
Jun 30, 2026
Reserved
Jun 10, 2026

Read the record on cve.org

Description

A heap buffer overflow flaw was found in 389 Directory Server. When serializing objectclass definitions, the oc_superior (SUP) field length is omitted from buffer size calculations in read_schema_dse() and schema_oc_to_string(), but the field is still written via strcat(). An attacker with Directory Manager privileges, or a compromised replication supplier, can trigger a server crash by creating objectclasses with long SUP values. This is an incomplete fix variant of CVE-2025-14905.

Scores

CVSSScoreVectorSource
3.16.5 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:Hredhat

Weaknesses

Affected Products

ProductVersions
Red Hat Directory Server 11Red Hat
    Red Hat Directory Server 12Red Hat
      Red Hat Directory Server 13Red Hat
        Red Hat Enterprise Linux 10Red Hat
          Red Hat Enterprise Linux 6Red Hat
            Red Hat Enterprise Linux 7Red Hat
              Red Hat Enterprise Linux 8Red Hat
                Red Hat Enterprise Linux 9Red Hat

                  References

                  Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.