CVE-2026-11787

6.3 Moyenne

Publiée le 09/06/2026 à 16:16 · Modifiée le 23/07/2026 à 10:10 · Modifiée · Source : secalert@redhat.com

Description

A flaw was found in 389 Directory Server. The ldap_utf8prev() function reads bytes before the start of a buffer without bounds checking, causing a heap buffer over-read in string filter parsing that may influence internal filter processing behavior.

Traduire en français

Produits concernés

Red Hat Directory Server 11
Red Hat Directory Server 12
Red Hat Directory Server 13
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Red Hat Enterprise Linux 9
Redhat directory server
Redhat 389 directory server
Redhat enterprise linux

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.0 Moyenne	secalert@redhat.com	`CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L`
3.1	6.3 Moyenne	nvd@nist.gov (NVD)	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L`

Faiblesses (CWE)

CWE-126

Références

https://access.redhat.com/security/cve/CVE-2026-11787 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2485425 Issue TrackingVendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories