Skip to content
CVE PROGRAM SOURCE RECORD1.9 Low

CVE-2026-11786

389-ds-base: 389-ds-base: heap out-of-bounds read in ldif parser str2entry_state_information_from_type()

Description

A flaw was found in 389 Directory Server. The LDIF parser reads past the end of a heap buffer when processing attribute types with trailing semicolons during database import, causing an out-of-bounds read detectable under memory instrumentation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat Directory Server 11

Default version status: affected

Red Hat Red Hat Directory Server 12

Default version status: affected

Red Hat Red Hat Directory Server 13

Default version status: affected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

Red Hat Red Hat Enterprise Linux 6

Default version status: unknown

Red Hat Red Hat Enterprise Linux 7

Default version status: affected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

References