RHSA-2026:36205: Red Hat 389-ds-base Heap Buffer Overflow & Integer Overflow Fixes

Vulnerability Overview Vulnerability Name: RHSA-2026:36205 - Security Advisory Publish Date: 2026-07-07 Update Date: 2026-07-07 Severity: Important Vulnerability Type: Security Update Impact Scope Affected Systems: Red Hat Enterprise Linux 7 Extended Lifecycle Support Vulnerability Description: - CVE-2026-11610: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND - CVE-2026-11774: 389-ds-base: Integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow Remediation Remediation Measures: 389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base package includes the Lightweight Directory Access Protocol (LDAP) server and command-line management tools. Specific Fixes: - 389-ds-base: Fixed heap buffer overflow in sasl_io_recv() (CVE-2026-11610) - 389-ds-base: Fixed integer overflow in SASL packet length (CVE-2026-11774) Additional Information CVSS Score: The CVSS base score for each vulnerability can be found in the References section. References: For more detailed information on security issues, including impact, CVSS scores, acknowledgments, and other relevant details, please refer to the CVE pages in the References section. Code Block POC Code / Exploit Code: No specific POC code or exploit code was provided on the page. Summary This security advisory provides security updates for 389 Directory Server in Red Hat Enterprise Linux 7 Extended Lifecycle Support, addressing two significant vulnerabilities (CVE-2026-11610 and CVE-2026-11774) involving heap buffer overflow and integer overflow issues. It is recommended that users apply this update as soon as possible to protect system security.

Goal Reached Thanks to every supporter — we hit 100%!

RHSA-2026:36205: Red Hat 389-ds-base Heap Buffer Overflow & Integer Overflow Fixes

More from this source