CVE-2026-11792
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
Heap buffer overflow in 389 Directory Server. The create_masked_entry_string() function in auditlog.c copies a password mask into a precisely-sized buffer without checking space, causing overflow when logging a short cleartext password.
Risk Assessment
An attacker can cause memory corruption and manipulate audit logs, hindering breach detection and potentially leading to privilege escalation.
Recommendation
Update 389 Directory Server to the latest patched version. Disable cleartext password logging and use secure password storage.
Original NVD description (English source)
A heap buffer overflow flaw was found in 389 Directory Server. When audit logging is enabled, the create_masked_entry_string() function in auditlog.c copies a fixed-length password mask into a precisely-sized heap buffer without checking available space. If a short cleartext password is logged (requiring non-default CLEAR password storage or a compromised replication peer), the copy overflows the buffer, corrupting heap memory and audit log output.