7.5

CVE-2026-15722

389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing

A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP server by sending a crafted StartNSDS50ReplicationRequest extended operation containing a replica ID field with more than 16 digit characters. The overflow occurs during payload decoding, before any authorization check. Stack protectors limit impact to denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Directory Server Version11.0
Redhat ≫ Directory Server Version12.0
Redhat ≫ Enterprise Linux Version7.0
Redhat ≫ Enterprise Linux Version8.0
Redhat ≫ Enterprise Linux Version9.0
Redhat ≫ Enterprise Linux Version10.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.87% 0.558
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
RedHat 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

https://access.redhat.com/security/cve/CVE-2026-15722
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2499961
Vendor Advisory
Issue Tracking
https://access.redhat.com/errata/RHSA-2026:55421
https://access.redhat.com/errata/RHSA-2026:55422
https://access.redhat.com/errata/RHSA-2026:55425
https://access.redhat.com/errata/RHSA-2026:55426
https://access.redhat.com/errata/RHSA-2026:55423
https://access.redhat.com/errata/RHSA-2026:55424
https://access.redhat.com/errata/RHSA-2026:55532
https://access.redhat.com/errata/RHSA-2026:55530
https://access.redhat.com/errata/RHSA-2026:55756
https://access.redhat.com/errata/RHSA-2026:55757
https://access.redhat.com/errata/RHSA-2026:55758
https://access.redhat.com/errata/RHSA-2026:55794
https://access.redhat.com/errata/RHSA-2026:56048
https://access.redhat.com/errata/RHSA-2026:56047
https://access.redhat.com/errata/RHSA-2026:56050