DEBIAN-CVE-2026-11793

A stack buffer overflow flaw was found in 389 Directory Server. The checkPrefix function in pw.c copies an attacker-controlled algorithm ID into a 256-byte stack buffer without bounds checking when parsing reversible-encrypted attribute values. An attacker with Directory Manager privileges can...

PT-2026-47782

Name of the Vulnerable Software and Affected Versions 389 Directory Server affected versions not specified Description A stack buffer overflow exists in the checkPrefix function within pw.c. The issue occurs when parsing reversible-encrypted attribute values, as an attacker-controlled algorithm I...