Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 431
Alerts This Week
Warning Icon 1 431

SUSE 389-ds Important Buffer Overflow and DoS Vulnerabilities 2026-3136-1

suse
Calendar Grey July 20, 2026
Scroller Suse
This important SUSE update addresses critical security flaws in 389-ds, improving system resilience and stability.
SUSE released a security update for 389-ds addressing 14 vulnerabilities, including buffer overflows and memory issues, impacting several SUSE products with patch installation inst...

Summary

## This update for 389-ds fixes the following issues: Update to version 2.2.10~git255.752643c78. Security issues fixed: * CVE-2026-11610: missing bounds check in `sasl_io_recv()` can lead to a heap buffer overflow when processing a specially crafted oversized LDAP UNBIND packet (bsc#1270695). * CVE-2026-11611: Content Synchronization persistent search plugin allows unbounded memory growth when an authenticated client stops reading sync responses(bsc#1267975). * CVE-2026-11774: integer overflow in `sasl_io_start_packet()` can lead to heap buffer overflow when processing a crafted SASL packet length prefix (bsc#1268298). * CVE-2026-11785: type confusion in the SSO token handler can cause partial stack address information disclosure in LDA responses (bsc#1268065).

Topics%20covered

Topics Covered

security advisory SuSE DoS important authentication heap buffer overflow

References

* bsc#1267975

* bsc#1268041

* bsc#1268046

* bsc#1268047

* bsc#1268057

* bsc#1268058

* bsc#1268060

* bsc#1268062

* bsc#1268064

* bsc#1268065

* bsc#1268115

* bsc#1268298

* bsc#1268491

* bsc#1269120

* bsc#1270695

Cross-

* CVE-2026-11610

* CVE-2026-11611

* CVE-2026-11774

* CVE-2026-11785

* CVE-2026-11786

* CVE-2026-11787

* CVE-2026-11788

* CVE-2026-11789

* CVE-2026-11790

* CVE-2026-11791

* CVE-2026-11792

* CVE-2026-11793

* CVE-2026-11884

* CVE-2026-12528

CVSS scores:

* CVE-2026-11610 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2026-11610 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2026-11611 ( SUSE ): 7.1

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:3136-1
Release Date: 2026-07-20T15:10:11Z
Rating: important

Topics%20covered

Topics Covered

security advisory SuSE DoS important authentication heap buffer overflow

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.