Homepage

Stack-based Buffer Overflow The advisory has been revoked - it doesn't affect any version of package 389-ds-base-libs  (opens in a new tab)

Threat Intelligence

EPSS
0.87% (56th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL7-389DSBASELIBS-18501843
  • published1 Aug 2026
  • disclosed31 Jul 2026
Report a new vulnerability Found a mistake?

Introduced: 31 Jul 2026

NewCVE-2026-15722  (opens in a new tab)
CWE-121  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:7.

NVD Description

Note: Versions mentioned in the description apply only to the upstream 389-ds-base-libs package and not the 389-ds-base-libs package as distributed by RHEL.

A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP server by sending a crafted StartNSDS50ReplicationRequest extended operation containing a replica ID field with more than 16 digit characters. The overflow occurs during payload decoding, before any authorization check. Stack protectors limit impact to denial of service.

References