What’s Vulnerable › Vulnerabilities

CVE-2026-11611: 389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditions

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-06-08 · updated 2026-07-23
• Weakness: CWE-400

Description

A flaw was found in 389 Directory Server. The Content Synchronization persistent search plugin allows unbounded memory growth when an authenticated client stops reading sync responses, enabling denial of service. Additional race conditions in plugin thread lifecycle can cause crashes during connection teardown or shutdown.

Affected products

• Red Hat 389 Directory Server: all versions
• RedHat Directory Server: 11.0, 12.0, 13.0
• Red Hat Enterprise Linux: 7.0, 8.0, 9.0, 10.0

References

• https://access.redhat.com/security/cve/CVE-2026-11611
• https://bugzilla.redhat.com/show_bug.cgi?id=2485424

Get alerted when CVE-2026-11611 or the next vulnerability affects your stack