CVE-2026-15722

Name of the Vulnerable Software and Affected Versions 389 Directory Server (389-ds-base) (affected versions not specified)

Description A stack buffer overflow occurs in the get ruvelement from berval() function within repl5 ruv.c. The issue arises when digit characters from a network-supplied RUV berval are copied into a fixed 16-byte stack buffer without proper bounds checking. A remote unauthenticated attacker can cause a denial of service by crashing the LDAP server through a crafted StartNSDS50ReplicationRequest extended operation containing a replica ID field exceeding 16 digit characters. This process happens during payload decoding, prior to any authorization checks. Stack protectors limit the potential impact to a server crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.