CVE-2026-11786: 389-ds-base: 389-ds-base: heap out-of-bounds read in ldif parser str2entry_state_information_from_type()
A flaw was found in 389 Directory Server. The LDIF parser reads past the end of a heap buffer when processing attribute types with trailing semicolons during database import, causing an out-of-bounds read detectable under memory instrumentation.
Other sources
A heap out-of-bounds read exists in str2entrystateinformationfromtype() (entry.c) in the 389 Directory Server LDIF parser. When importing LDIF with attribute types containing trailing semicolons, the code accesses p[3] through p[6] after finding a semicolon via PLstrchr without verifying sufficient bytes remain in the allocation.
Requires local administrator access via ldif2db import. ASan-proven on instrumented builds; production binaries do not crash due to allocator padding. Present unchanged across all shipped 389-ds-base versions.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-11786?
The severity of CVE-2026-11786 is rated low with a score of 1.9.
What does CVE-2026-11786 affect?
CVE-2026-11786 affects the Red Hat 389 Directory Server.
How do I fix CVE-2026-11786?
To fix CVE-2026-11786, you should update your Red Hat 389 Directory Server to the latest available version that addresses this vulnerability.
What is the cause of CVE-2026-11786?
CVE-2026-11786 is caused by a heap out-of-bounds read in the LDIF parser while processing attribute types with trailing semicolons.
Is CVE-2026-11786 exploitable in the wild?
CVE-2026-11786 requires specific conditions, making it less likely to be exploited directly in the wild.