CVEvulnerability

CVE-2026-11611

6.5 MEDIUM Published 2026-06-08 Modified 2026-07-23 Official page ↗
Status
Modified
Published
2026-06-08
Last modified
2026-07-23
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400

Description

A flaw was found in 389 Directory Server. The Content Synchronization persistent search plugin allows unbounded memory growth when an authenticated client stops reading sync responses, enabling denial of service. Additional race conditions in plugin thread lifecycle can cause crashes during connection teardown or shutdown.

Affected configurations

• redhat directory server 11.0 • redhat directory server 12.0 • redhat directory server 13.0 • redhat 389 directory server • redhat enterprise linux 7.0 • redhat enterprise linux 8.0 • redhat enterprise linux 9.0 • redhat enterprise linux 10.0

Related

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References