CVE-2026-11611

Description

A flaw was found in 389 Directory Server. The Content Synchronization persistent search plugin allows unbounded memory growth when an authenticated client stops reading sync responses, enabling denial of service. Additional race conditions in plugin thread lifecycle can cause crashes during connection teardown or shutdown.

Traduire en français

Produits concernés

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Red Hat Directory Server 13
• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Redhat directory server
• Redhat 389 directory server
• Redhat enterprise linux

Scores CVSS

Faiblesses (CWE)

• CWE-400

Références

• https://access.redhat.com/security/cve/CVE-2026-11611 Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2485424 Issue TrackingVendor Advisory

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories