CVE-2026-11788

CVE-2026-11788 affects 389-ds-base (389 Directory Server) via the deref control plugin: it dereferences a BER structure without verifying allocation failure, enabling an unauthenticated remote attacker to crash the LDAP server under memory pressure. The issue is rooted in a null pointer dereferen...