CVE-2026-11788

389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser

HIGH

7.5

CVSS Score

Published: June 9, 2026 at 01:02 PM UTC

Updated: October 8, 2026 at 03:17 PM UTC

3 products affected across 2 vendorsEnterprise Linux389 Directory ServerDirectory Server

Using Red Hat Directory Server 11 by Red Hat?

Get instant alerts when new vulnerabilities affect Red Hat Directory Server 11 - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploit prediction

EPSS 0.6%

SSVC

No known exploit

Description

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

389 Directory Server · Fedora Project

95%

Directory Server · Red Hatrpm

95%

11.0 12.0 13.0

Vendor states this is fixed in 8060020260908152739.0ca98e7e (unaffected)

Vendor states this is fixed in 8080020260806114250.f969626e (unaffected)

Vendor states this is fixed in 8100020260803140625.37ed7c03 (unaffected)

Vendor states this is fixed in 9020020260730155601.1674d574 (unaffected)

Vendor states this is fixed in 9040020260810131422.1674d574 (unaffected)

Enterprise Linux · Red Hatrpm

95%

10.0 7.0 8.0 9.0

Vendor states this is fixed in 0:1.3.11.1-14.el7_9 (unaffected)

Vendor states this is fixed in 0:2.2.4-20.el9_2 (unaffected)

Vendor states this is fixed in 0:2.4.5-27.el9_4 (unaffected)

Vendor states this is fixed in 0:2.6.1-23.el9_6 (unaffected)

Vendor states this is fixed in 0:2.8.0-9.el9_8 (unaffected)

Vendor states this is fixed in 0:3.0.6-20.el10_0 (unaffected)

Vendor states this is fixed in 0:3.2.0-9.el10_2 (unaffected)

Vendor states this is fixed in 8040020260803141511.96015a92 (unaffected)

Vendor states this is fixed in 8060020260806120442.824efc52 (unaffected)

Vendor states this is fixed in 8080020260806114228.6dbb3803 (unaffected)

Vendor states this is fixed in 8100020260806150504.25e700aa (unaffected)

Vendor states this is fixed in 6 (unknown)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (19)

VDB Entryx_refsource_REDHATVendor Advisory

Source: cverecord

https://access.redhat.com/security/cve/CVE-2026-11788

Issue Trackingx_refsource_REDHATVendor Advisory

Source: cverecord

https://bugzilla.redhat.com/show_bug.cgi?id=2485423

Source: cverecord

https://redhat.atlassian.net/browse/PSIRTSUPT-7600