CVE-2026-11786 — 389-ds-base: 389-ds-base: heap out-of-bounds read in ldif parser str2entry_state_information_from_type()
A flaw was found in 389 Directory Server. The LDIF parser reads past the end of a heap buffer when processing attribute types with trailing semicolons during database import, ca…
Published: 2026-06-09 · CVSS: 1.9 · CVSS 3.1
A flaw was found in 389 Directory Server. The LDIF parser reads past the end of a heap buffer when processing attribute types with trailing semicolons during database import, causing an out-of-bounds read detectable under memory instrumentation.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7