Heap Buffer Overflow in 389 Directory Server

CVE-2026-11792

What is CVE-2026-11792?

A heap buffer overflow flaw exists in the 389 Directory Server that can be exploited when audit logging is enabled. In the create_masked_entry_string() function located in auditlog.c, a fixed-length password mask is copied into a heap buffer without proper space validation. As a result, if a short cleartext password is logged and particularly when requiring non-default CLEAR password storage or a compromised replication peer, the copying process can exceed the buffer limit, leading to heap memory corruption and potentially affecting the integrity of the audit log output.

References