CVE-2026-11792Low· 3.3▾ SunlitA heap buffer overflow flaw was found in 389 Directory Server. When audit logging is enabled, the create_masked_entry_string() function in auditlog.c copies a fixed-length password mask into a precisely-sized heap buffer without checking…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 18.2 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Nov 6.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.3%
A heap buffer overflow flaw was found in 389 Directory Server. When audit logging is enabled, the create_masked_entry_string() function in auditlog.c copies a fixed-length password mask into a precisely-sized heap buffer without checking available space. If a short cleartext password is logged (requiring non-default CLEAR password storage or a compromised replication peer), the copy overflows the buffer, corrupting heap memory and audit log output.
redhat-ds:11/389-ds-baseredhat-ds:12/389-ds-base (all versions)389-ds-base (all versions)389-ds-base (all versions)389-ds-base389-ds-base389-ds-base389-ds-base (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Do not use passwordStorageScheme=CLEAR (default PBKDF2-SHA512 produces hashes longer than 23 bytes). Disable audit logging if not required. Monitor replication agreements for unauthorized peers.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-14940Medium· 5.3389-ds-base: 389-ds-base: heap-buffer-overflow in dn normalization via quoted multivalued rdn
CVE-2026-11884Medium· 6.5389-ds-base: 389-ds-base: heap buffer overflow in schema objectclass serialization due to missing oc_superior in size calculation
CVE-2023-3428Medium· 6.2Imagemagick: heap-buffer-overflow in coders/tiff.c
CVE-2023-43787High· 7.8Libx11: integer overflow in xcreateimage() leading to a heap overflow
CVE-2023-52356High· 7.5Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service
CVE-2026-12528Medium· 5.4389-ds-base: 389-ds-base: heap-buffer-overflows in __aclp__normalize_acltxt()