CVE-2026-11786 - CERT CVE
ID CVE-2026-11786
Sažetak A flaw was found in 389 Directory Server. The LDIF parser reads past the end of a heap buffer when processing attribute types with trailing semicolons during database import, causing an out-of-bounds read detectable under memory instrumentation.
Reference
CVSS
Base: 1.9
Impact: 1.4
Exploitability:0.5
Pristup
VektorSloženostAutentikacija
LOCAL HIGH HIGH
Impact
PovjerljivostCjelovitostDostupnost
LOW NONE NONE
CVSS vektor CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N
Zadnje važnije ažuriranje 12-06-2026 - 18:40
Objavljeno 09-06-2026 - 14:16