Medium · published June 9, 2026
A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure.
| Product | Versions | Fixed in |
|---|---|---|
| redhat/directory_server | all versions | — |
| redhat/directory_server | all versions | — |
| redhat/directory_server | all versions | — |
| redhat/389_directory_server | all versions | — |
| redhat/enterprise_linux | all versions | — |
| redhat/enterprise_linux | all versions | — |
| redhat/enterprise_linux | all versions | — |
| redhat/enterprise_linux | all versions | — |