CVE-2026-14969: 389-ds-base: 389-ds-base: static initialization vector in aes-cbc/3des-cbc attribute encryption
A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for AES-CBC and 3DES-CBC operations, allowing an attacker with privileged filesystem access to detect plaintext equality across encrypted entries by comparing ciphertext blocks.
Other sources
A flaw was found in 389-ds-base. The LDBM backend attribute encryption implementation in ldap/servers/slapd/back-ldbm/ldbmattrcrypt.c uses a hardcoded static initialization vector (IV) — 16 bytes of 0x61 — for all AES-CBC-PAD and 3DES-CBC-PAD encryption operations. CBC mode requires a unique, unpredictable IV per encryption operation to provide semantic security. The static IV causes identical plaintext attribute values to produce identical ciphertext, enabling an attacker with privileged read access to the LDBM database files to detect plaintext equality across entries by comparing ciphertext blocks and to facilitate offline cryptanalysis of encrypted attributes.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Modify the LDBM backend attribute encryption code in ldap/servers/slapd/back-ldbm/ldbm_attrcrypt.c so AES-CBC-PAD and 3DES-CBC-PAD encryptions use a unique, unpredictable 16-byte IV for each encryption operation (replace the hardcoded 16-byte 0x61 static IV).
389-ds-base (ldap/servers/slapd/back-ldbm/ldbm_attrcrypt.c LDBM backend attribute encryption) AES-CBC-PAD/3DES-CBC-PAD initialization vector (IV) generation = Use a unique, unpredictable IV per encryption operation instead of the hardcoded 16 bytes of 0x61
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14969?
The severity of CVE-2026-14969 is rated as medium with a score of 4.4.
How do I fix CVE-2026-14969?
To fix CVE-2026-14969, update the 389-ds-base to a version that addresses this vulnerability.
What kind of access is required to exploit CVE-2026-14969?
An attacker needs privileged filesystem access to exploit CVE-2026-14969.
What impact does CVE-2026-14969 have on data security?
CVE-2026-14969 allows an attacker to detect plaintext equality across encrypted entries, compromising data confidentiality.
Which operations are affected by CVE-2026-14969?
CVE-2026-14969 affects AES-CBC and 3DES-CBC operations in the attribute encryption of 389-ds-base.