Stack Buffer Overflow Vulnerability in 389 Directory Server by Red Hat
CVE-2026-11793

4.9MEDIUM

Key Information:

Vendor: Red Hat
Status: Red Hat Directory Server 11; Red Hat Directory Server 12; Red Hat Directory Server 13; Red Hat Enterprise Linux 10
Vendor: CVE Published:; 9 June 2026

What is CVE-2026-11793?

A stack buffer overflow vulnerability exists in the 389 Directory Server due to the improper handling of attacker-controlled algorithm IDs within the checkPrefix() function found in pw.c. This occurs while parsing reversible-encrypted attribute values, which allows an attacker with Directory Manager privileges to craft oversized algorithm IDs. If successfully exploited, this may lead to a denial of service condition, causing the LDAP server to crash. Mitigation through FORTIFY_SOURCE limits the impact but does not completely eliminate the risk of service disruption.