Skip to content
Threat Feed
Subscribe

Product

Red Hat Identity Management

1 brief RSS
critical advisory

CVE-2026-11610: 389 Directory Server SASL Heap Buffer Overflow Leading to DoS

A heap buffer overflow vulnerability (CVE-2026-11610) exists in the SASL I/O layer of 389 Directory Server (389-ds-base), active since version 1.3.2. An authenticated attacker can send a specially crafted, oversized LDAP UNBIND packet after a successful SASL bind with integrity protection. This causes approximately 2 megabytes of attacker-controlled data to overflow a 512-byte heap buffer in sasl_io_recv(), leading to a denial of service (server crash).

389 Directory Server +2 heap-overflow denial-of-service ldap sasl linux cve
1t 1c