CVE-2026-11884

Name of the Vulnerable Software and Affected Versions 389 Directory Server (affected versions not specified)

Description A heap buffer overflow occurs during the serialization of objectclass definitions. The length of the oc superior (SUP) field is omitted from buffer size calculations within the read schema dse() and schema oc to string() functions, yet the field is still written using strcat(). An attacker with Directory Manager privileges or a compromised replication supplier can cause a server crash by creating objectclasses with long SUP values.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.