Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 439
Alerts This Week
Warning Icon 1 439

SUSE 389-ds Important Heap Overflow Security Vulnerability 2026-3138-1

suse
Calendar Grey July 20, 2026
Scroller Suse
Important security update for 389-ds resolves multiple critical issues including heap overflows and potential denial of service.
SUSE has released a security update for 389-ds addressing 14 vulnerabilities, including important fixes for heap buffer overflows and other critical issues, enhancing system securi...

Summary

## This update for 389-ds fixes the following issues * Update to version 2.7.0~git212.9b0755edb. * CVE-2026-11610: heap buffer overflow in `sasl_io_recv()` via padded SASL UNBIND (bsc#1270695). * CVE-2026-11611: content synchronization persistent search plugin can allow unbounded memory growth (bsc#1267975). * CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow (bsc#1268298). * CVE-2026-11785: type confusion in the SSO token handler can cause partial stack address information disclosure (bsc#1268065). * CVE-2026-11786: lack of length check can cause an out-of-bounds read (bsc#1268064). * CVE-2026-11787: lack of bounds check can lead to a heap buffer overread (bsc#1268062).

Topics%20covered

Topics Covered

security advisory denial of service SuSE important heap overflow buffer overread

References

* bsc#1267975

* bsc#1268041

* bsc#1268046

* bsc#1268047

* bsc#1268057

* bsc#1268058

* bsc#1268060

* bsc#1268062

* bsc#1268064

* bsc#1268065

* bsc#1268115

* bsc#1268298

* bsc#1268491

* bsc#1269120

* bsc#1270695

Cross-

* CVE-2026-11610

* CVE-2026-11611

* CVE-2026-11774

* CVE-2026-11785

* CVE-2026-11786

* CVE-2026-11787

* CVE-2026-11788

* CVE-2026-11789

* CVE-2026-11790

* CVE-2026-11791

* CVE-2026-11792

* CVE-2026-11793

* CVE-2026-11884

* CVE-2026-12528

CVSS scores:

* CVE-2026-11610 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2026-11610 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2026-11611 ( SUSE ): 7.1

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:3138-1
Release Date: 2026-07-20T15:10:54Z
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service SuSE important heap overflow buffer overread

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.