Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2026-11788

Опубликовано: 09 июн. 2026
Источник: debian
EPSS Низкий

Описание

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
389-ds-basefixed3.3.1-1package

Примечания

  • https://bugzilla.redhat.com/show_bug.cgi?id=2485423

EPSS

Процентиль: 47%
0.00561
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
5 месяцев назад

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure.

CVSS3: 5.9
redhat
7 месяцев назад

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure.

CVSS3: 7.5
nvd
5 месяцев назад

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure.

CVSS3: 7.5
redos
около 2 месяцев назад

Уязвимость 389-ds-base

CVSS3: 7.5
redos
около 2 месяцев назад

Уязвимость 389-ds-base

EPSS

Процентиль: 47%
0.00561
Низкий