Heap Buffer Overflow Vulnerability in 389 Directory Server by Red Hat

CVE-2026-12528

What is CVE-2026-12528?

A vulnerability has been identified in the 389 Directory Server that arises from the __aclp__normalize_acltxt() function in aclparse.c. The issue occurs when a malformed Access Control Instruction (ACI) string is processed, potentially leading to heap buffer overflow issues. This flaw occurs because the function does not correctly validate the ACI keyword length after whitespace is removed, allowing for out-of-bounds writes and reads. An authenticated user with write access can exploit this vulnerability by crafting a malicious ACI value, which may corrupt the memory associated with the directory server process.

References