CVE-2026-14940CWE-122

389-ds-base: 389-ds-base: heap-buffer-overflow in dn normalization via quoted multivalued rdn

Medium · published July 7, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
41.0
In the wild
Unconfirmed
What it is

A heap-buffer-overflow flaw was found in 389 Directory Server (389-ds-base). When

normalizing a Distinguished Name (DN) that contains a legacy-quoted value encoding a

multivalued nested Relative Distinguished Name (RDN), the server can write past the

end of a heap allocation while sorting RDN attribute-value pairs. An unauthenticated

remote attacker can trigger this condition by sending an LDAP operation whose DN

reaches the DN normalization routine, such as a search with a crafted base DN. This

can corrupt heap memory and may cause denial of service.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00487 · 41.0th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2026-07-07T13:54Z
EPSS history
Timeline
  • 07 JUL 13:54Z
    389-ds-base: 389-ds-base: heap-buffer-overflow in dn normalization via quoted multivalued rdn
    cvelistv5