Remote Denial of Service Vulnerability in 389-ds-base by Red Hat
CVE-2026-78701
6.5MEDIUM
Key Information:
- Vendor
Red Hat
- Status
- Vendor
- CVE Published:
- 25 August 2026
What is CVE-2026-78701?
A flaw exists in the 389-ds-base component, which can be exploited by remote, authenticated attackers. By sending specially crafted requests during the Simple Authentication and Security Layer (SASL) UNBIND process, an attacker can cause the server connection to stall. This leads to resource exhaustion, potentially resulting in a Denial of Service that affects server availability.
Affected Version(s)
Red Hat Directory Server 13.2 1788851765
Red Hat Enterprise Linux 10 0:3.2.0-10.el10_2
Red Hat Enterprise Linux 9 0:2.8.0-10.el9_8