7.5

CVE-2026-11788

389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Directory Server Version 11.0
Redhat ≫ Directory Server Version 12.0
Redhat ≫ Directory Server Version 13.0
Redhat ≫ Enterprise Linux Version 7.0
Redhat ≫ Enterprise Linux Version 8.0
Redhat ≫ Enterprise Linux Version 9.0
Redhat ≫ Enterprise Linux Version 10.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.58% 0.451
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
RedHat 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://bugzilla.redhat.com/show_bug.cgi?id=2485423
Vendor Advisory
Issue Tracking
https://access.redhat.com/security/cve/CVE-2026-11788
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:55421
https://access.redhat.com/errata/RHSA-2026:55422
https://access.redhat.com/errata/RHSA-2026:55425
https://access.redhat.com/errata/RHSA-2026:55426
https://access.redhat.com/errata/RHSA-2026:55423
https://access.redhat.com/errata/RHSA-2026:55424
https://access.redhat.com/errata/RHSA-2026:55532
https://access.redhat.com/errata/RHSA-2026:55530
https://access.redhat.com/errata/RHSA-2026:55756
https://access.redhat.com/errata/RHSA-2026:55757
https://access.redhat.com/errata/RHSA-2026:55758
https://access.redhat.com/errata/RHSA-2026:55794
https://access.redhat.com/errata/RHSA-2026:56048
https://access.redhat.com/errata/RHSA-2026:56047
https://access.redhat.com/errata/RHSA-2026:56050