{"id":"CVE-2026-18453","state":"PUBLISHED","title":"389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search","description":"A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of op_shared_search allows an unauthenticated remote attacker to crash the LDAP server by sending a crafted sequence of search requests using the USE_ONE_BACKEND control, resulting in denial of service.","publishedAt":"2026-09-07T14:14:48.845Z","updatedAt":"2026-10-08T14:14:55.557Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","source":"redhat"},"assigner":"redhat","products":["Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8","Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8","Red Hat Red Hat Directory Server 11.9 for RHEL 8","Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9","Red Hat Red Hat Directory Server 12.4 E4S for RHEL 9","Red Hat Red Hat Enterprise Linux 10","Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support","Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support","Red Hat Red Hat Enterprise Linux 8","Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service","Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","Red Hat Red Hat Enterprise Linux 9","Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support","Red Hat Red Hat Directory Server 13.2","Red Hat Red Hat Directory Server 12","Red Hat Red Hat Directory Server 13","Red Hat Red Hat Enterprise Linux 6"],"affected":[{"vendor":"Red Hat","product":"Red Hat Directory Server 11.5 E4S for RHEL 8","packageName":"redhat-ds:11","defaultStatus":"affected","versions":[{"version":"8060020260908152739.0ca98e7e","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:directory_server_e4s:11.5::el8"]},{"vendor":"Red Hat","product":"Red Hat Directory Server 11.7 E4S for RHEL 8","packageName":"redhat-ds:11","defaultStatus":"affected","versions":[{"version":"8080020260903102346.f969626e","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:directory_server_e4s:11.7::el8"]},{"vendor":"Red Hat","product":"Red Hat Directory Server 11.9 for RHEL 8","packageName":"redhat-ds:11","defaultStatus":"affected","versions":[{"version":"8100020260904171440.37ed7c03","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:directory_server:11.9::el8"]},{"vendor":"Red Hat","product":"Red Hat Directory Server 12.2 E4S for RHEL 9","packageName":"redhat-ds:12","defaultStatus":"affected","versions":[{"version":"9020020260903155914.1674d574","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:directory_server_e4s:12.2::el9"]},{"vendor":"Red Hat","product":"Red Hat Directory Server 12.4 E4S for RHEL 9","packageName":"redhat-ds:12","defaultStatus":"affected","versions":[{"version":"9040020260903102623.1674d574","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:directory_server_e4s:12.4::el9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"389-ds-base","defaultStatus":"affected","versions":[{"version":"0:3.2.0-10.el10_2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.2"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","packageName":"389-ds-base","defaultStatus":"affected","versions":[{"version":"0:3.0.6-21.el10_0","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","packageName":"389-ds-base","defaultStatus":"affected","versions":[{"version":"0:1.3.11.1-15.el7_9","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"389-ds:1.4","defaultStatus":"affected","versions":[{"version":"8100020260904155442.25e700aa","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","packageName":"389-ds:1.4","defaultStatus":"affected","versions":[{"version":"8040020260901171549.96015a92","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","packageName":"389-ds:1.4","defaultStatus":"affected","versions":[{"version":"8040020260901171549.96015a92","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","packageName":"389-ds:1.4","defaultStatus":"affected","versions":[{"version":"8060020260901145727.824efc52","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","packageName":"389-ds:1.4","defaultStatus":"affected","versions":[{"version":"8060020260901145727.824efc52","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","packageName":"389-ds:1.4","defaultStatus":"affected","versions":[{"version":"8080020260831180218.6dbb3803","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","packageName":"389-ds:1.4","defaultStatus":"affected","versions":[{"version":"8080020260831180218.6dbb3803","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"389-ds-base","defaultStatus":"affected","versions":[{"version":"0:2.8.0-10.el9_8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","packageName":"389-ds-base","defaultStatus":"affected","versions":[{"version":"0:2.2.4-22.el9_2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","packageName":"389-ds-base","defaultStatus":"affected","versions":[{"version":"0:2.4.5-29.el9_4","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:9.4::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","packageName":"389-ds-base","defaultStatus":"affected","versions":[{"version":"0:2.6.1-24.el9_6","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/a:redhat:rhel_eus:9.6::crb"]},{"vendor":"Red Hat","product":"Red Hat Directory Server 13.2","packageName":"dirsrv/dirsrv-container-rhel10","defaultStatus":"affected","versions":[{"version":"1788851765","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:directory_server:13.2::el10"]},{"vendor":"Red Hat","product":"Red Hat Directory Server 12","packageName":"redhat-ds:12/389-ds-base","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:directory_server:12"]},{"vendor":"Red Hat","product":"Red Hat Directory Server 13","packageName":"389-ds-base","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:directory_server:13"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"389-ds-base","defaultStatus":"unknown","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:6"]}],"references":["https://access.redhat.com/errata/RHSA-2026:64771","https://access.redhat.com/errata/RHSA-2026:64776","https://access.redhat.com/errata/RHSA-2026:64778","https://access.redhat.com/errata/RHSA-2026:64779","https://access.redhat.com/errata/RHSA-2026:64780","https://access.redhat.com/errata/RHSA-2026:64781","https://access.redhat.com/errata/RHSA-2026:64783","https://access.redhat.com/errata/RHSA-2026:64784","https://access.redhat.com/errata/RHSA-2026:64785","https://access.redhat.com/errata/RHSA-2026:64789","https://access.redhat.com/errata/RHSA-2026:64790","https://access.redhat.com/errata/RHSA-2026:64791","https://access.redhat.com/errata/RHSA-2026:64792","https://access.redhat.com/errata/RHSA-2026:64793","https://access.redhat.com/errata/RHSA-2026:64804","https://access.redhat.com/errata/RHSA-2026:65119","https://access.redhat.com/errata/RHSA-2026:79217","https://access.redhat.com/security/cve/CVE-2026-18453","https://bugzilla.redhat.com/show_bug.cgi?id=2509696"],"weaknesses":["CWE-476"],"ingestedAt":"2026-10-29T20:11:10.572Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/18xxx/CVE-2026-18453.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-18453","state":"PUBLISHED","datePublished":"2026-09-07T14:14:48.845Z","dateUpdated":"2026-10-08T14:14:55.557Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2026-07-31T06:49:45.234Z"},"containers":{"cna":{"title":"389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search","descriptions":[{"lang":"en","value":"A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of op_shared_search allows an unauthenticated remote attacker to crash the LDAP server by sending a crafted sequence of search requests using the USE_ONE_BACKEND control, resulting in denial of service."}],"affected":[{"vendor":"Red Hat","product":"Red Hat Directory Server 11.5 E4S for RHEL 8","packageName":"redhat-ds:11","defaultStatus":"affected","versions":[{"version":"8060020260908152739.0ca98e7e","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:directory_server_e4s:11.5::el8"]},{"vendor":"Red Hat","product":"Red Hat Directory Server 11.7 E4S for RHEL 8","packageName":"redhat-ds:11","defaultStatus":"affected","versions":[{"version":"8080020260903102346.f969626e","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:directory_server_e4s:11.7::el8"]},{"vendor":"Red Hat","product":"Red Hat Directory Server 11.9 for RHEL 8","packageName":"redhat-ds:11","defaultStatus":"affected","versions":[{"version":"8100020260904171440.37ed7c03","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:directory_server:11.9::el8"]},{"vendor":"Red Hat","product":"Red Hat Directory Server 12.2 E4S for RHEL 9","packageName":"redhat-ds:12","defaultStatus":"affected","versions":[{"version":"9020020260903155914.1674d574","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:directory_server_e4s:12.2::el9"]},{"vendor":"Red Hat","product":"Red Hat Directory Server 12.4 E4S for RHEL 9","packageName":"redhat-ds:12","defaultStatus":"affected","versions":[{"version":"9040020260903102623.1674d574","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:directory_server_e4s:12.4::el9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"389-ds-base","defaultStatus":"affected","versions":[{"version":"0:3.2.0-10.el10_2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.2"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","packageName":"389-ds-base","defaultStatus":"affected","versions":[{"version":"0:3.0.6-21.el10_0","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","packageName":"389-ds-base","defaultStatus":"affected","versions":[{"version":"0:1.3.11.1-15.el7_9","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"389-ds:1.4","defaultStatus":"affected","versions":[{"version":"8100020260904155442.25e700aa","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","packageName":"389-ds:1.4","defaultStatus":"affected","versions":[{"version":"8040020260901171549.96015a92","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","packageName":"389-ds:1.4","defaultStatus":"affected","versions":[{"version":"8040020260901171549.96015a92","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","packageName":"389-ds:1.4","defaultStatus":"affected","versions":[{"version":"8060020260901145727.824efc52","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","packageName":"389-ds:1.4","defaultStatus":"affected","versions":[{"version":"8060020260901145727.824efc52","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","packageName":"389-ds:1.4","defaultStatus":"affected","versions":[{"version":"8080020260831180218.6dbb3803","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","packageName":"389-ds:1.4","defaultStatus":"affected","versions":[{"version":"8080020260831180218.6dbb3803","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"389-ds-base","defaultStatus":"affected","versions":[{"version":"0:2.8.0-10.el9_8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","packageName":"389-ds-base","defaultStatus":"affected","versions":[{"version":"0:2.2.4-22.el9_2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","packageName":"389-ds-base","defaultStatus":"affected","versions":[{"version":"0:2.4.5-29.el9_4","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:9.4::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","packageName":"389-ds-base","defaultStatus":"affected","versions":[{"version":"0:2.6.1-24.el9_6","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/a:redhat:rhel_eus:9.6::crb"]},{"vendor":"Red Hat","product":"Red Hat Directory Server 13.2","packageName":"dirsrv/dirsrv-container-rhel10","defaultStatus":"affected","versions":[{"version":"1788851765","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:directory_server:13.2::el10"]},{"vendor":"Red Hat","product":"Red Hat Directory Server 12","packageName":"redhat-ds:12/389-ds-base","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:directory_server:12"]},{"vendor":"Red Hat","product":"Red Hat Directory Server 13","packageName":"389-ds-base","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:directory_server:13"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"389-ds-base","defaultStatus":"unknown","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:6"]}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:64771","name":"RHSA-2026:64771","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:64776","name":"RHSA-2026:64776","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:64778","name":"RHSA-2026:64778","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:64779","name":"RHSA-2026:64779","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:64780","name":"RHSA-2026:64780","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:64781","name":"RHSA-2026:64781","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:64783","name":"RHSA-2026:64783","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:64784","name":"RHSA-2026:64784","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:64785","name":"RHSA-2026:64785","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:64789","name":"RHSA-2026:64789","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:64790","name":"RHSA-2026:64790","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:64791","name":"RHSA-2026:64791","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:64792","name":"RHSA-2026:64792","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:64793","name":"RHSA-2026:64793","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:64804","name":"RHSA-2026:64804","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:65119","name":"RHSA-2026:65119","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:79217","name":"RHSA-2026:79217","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-18453","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2509696","name":"RHBZ#2509696","tags":["issue-tracking","x_refsource_REDHAT"]}],"metrics":[{"other":{"content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"},"type":"Red Hat severity rating"}},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-476","description":"NULL Pointer Dereference","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"redhat","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateUpdated":"2026-10-08T14:14:55.557Z"},"datePublic":"2026-09-07T09:00:00.000Z","x_redhatCweChain":"CWE-476: NULL Pointer Dereference","workarounds":[{"lang":"en","value":"Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible."}],"timeline":[{"lang":"en","time":"2026-07-08T00:00:00.000Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-09-07T09:00:00.000Z","value":"Made public."}],"credits":[{"lang":"en","value":"Red Hat would like to thank Arthur Chan (Ada Logics) and Team (Anthropic) for reporting this issue."}],"x_generator":{"engine":"cvelib 1.8.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-09-09T14:40:00.574684Z","id":"CVE-2026-18453","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-09-09T14:40:15.528Z"}}]}}}