CVE-2026-11611CWE-400

389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditions

Medium · published June 8, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
14.7
In the wild
Unconfirmed
What it is

A flaw was found in 389 Directory Server. The Content Synchronization persistent search plugin allows unbounded memory growth when an authenticated client stops reading sync responses, enabling denial of service. Additional race conditions in plugin thread lifecycle can cause crashes during connection teardown or shutdown.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00244 · 14.7th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2026-06-08T16:17Z
EPSS history
Timeline
  • 08 JUN 16:17Z
    389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditions
    cvelistv5