UBUNTU-CVE-2026-117548: Null Pointer Dereference
A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN (rename) operation uses an attribute's schema alias name (such as "commonName") instead of its canonical name (such as "cn") as the new relative distinguished name. An authenticated attacker with the ModifyDN (rename) permission on the affected entry can use this flaw to crash the directory server, causing a denial of service.
Affected Software
Frequently Asked Questions
Who can exploit this issue?
An authenticated attacker needs ModifyDN (rename) permission on the affected directory entry. The issue is therefore relevant to deployments where users or service accounts can rename entries they control or manage.
What operation triggers the crash?
The attacker must submit a ModifyDN rename request whose new relative distinguished name uses a schema attribute alias, such as "commonName", rather than the canonical attribute name, such as "cn". Successful triggering can crash the directory server and cause denial of service.
Is an unauthenticated remote attacker able to exploit it?
No. The reported attack vector is network-accessible, but exploitation requires prior authentication and the required ModifyDN permission.