{"affected":[{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"redhat-ds:11","product":"Red Hat Directory Server 11.5 E4S for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8060020260702180044.0ca98e7e","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"redhat-ds:11","product":"Red Hat Directory Server 11.7 E4S for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8080020260702180836.f969626e","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"redhat-ds:11","product":"Red Hat Directory Server 11.9 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8100020260702145313.37ed7c03","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"redhat-ds:12","product":"Red Hat Directory Server 12.2 E4S for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"9020020260703060155.1674d574","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"redhat-ds:12","product":"Red Hat Directory Server 12.4 E4S for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"9040020260703055735.1674d574","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds-base","product":"Red Hat Enterprise Linux 10","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.2.0-8.el10_2","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds-base","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.0.6-19.el10_0","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds-base","product":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.3.11.1-13.el7_9","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds:1.4","product":"Red Hat Enterprise Linux 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8100020260626120929.25e700aa","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds:1.4","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8040020260629123121.96015a92","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds:1.4","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8040020260629123121.96015a92","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds:1.4","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8060020260626130540.824efc52","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds:1.4","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8060020260626130540.824efc52","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds:1.4","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8080020260630025241.6dbb3803","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds:1.4","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8080020260630025241.6dbb3803","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds-base","product":"Red Hat Enterprise Linux 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.8.0-8.el9_8","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds-base","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.2.4-19.el9_2","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds-base","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.4.5-26.el9_4","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds-base","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.6.1-22.el9_6","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://catalog.redhat.com/software/containers/","packageName":"dirsrv/dirsrv-container-rhel10","product":"Red Hat Directory Server 13.2","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1783452100","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"redhat-ds:12/389-ds-base","product":"Red Hat Directory Server 12","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds-base","product":"Red Hat Directory Server 13","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds-base","product":"Red Hat Enterprise Linux 6","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"redhat-ds:11","product":"Red Hat Directory Server 11.5 E4S for RHEL 8","source":"ADP: redhat-SADP","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8060020260702180044.0ca98e7e","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"redhat-ds:11","product":"Red Hat Directory Server 11.7 E4S for RHEL 8","source":"ADP: redhat-SADP","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8080020260702180836.f969626e","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"redhat-ds:11","product":"Red Hat Directory Server 11.9 for RHEL 8","source":"ADP: redhat-SADP","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8100020260702145313.37ed7c03","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"redhat-ds:12","product":"Red Hat Directory Server 12.2 E4S for RHEL 9","source":"ADP: redhat-SADP","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"9020020260703060155.1674d574","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"redhat-ds:12","product":"Red Hat Directory Server 12.4 E4S for RHEL 9","source":"ADP: redhat-SADP","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"9040020260703055735.1674d574","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds-base","product":"Red Hat Enterprise Linux 10","source":"ADP: redhat-SADP","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.2.0-8.el10_2","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds-base","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","source":"ADP: redhat-SADP","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.0.6-19.el10_0","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds-base","product":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","source":"ADP: redhat-SADP","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.3.11.1-13.el7_9","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds:1.4","product":"Red Hat Enterprise Linux 8","source":"ADP: redhat-SADP","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8100020260626120929.25e700aa","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds:1.4","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","source":"ADP: redhat-SADP","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8040020260629123121.96015a92","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds:1.4","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","source":"ADP: redhat-SADP","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8040020260629123121.96015a92","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds:1.4","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","source":"ADP: redhat-SADP","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8060020260626130540.824efc52","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds:1.4","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","source":"ADP: redhat-SADP","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8060020260626130540.824efc52","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds:1.4","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","source":"ADP: redhat-SADP","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8080020260630025241.6dbb3803","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds:1.4","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","source":"ADP: redhat-SADP","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8080020260630025241.6dbb3803","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds-base","product":"Red Hat Enterprise Linux 9","source":"ADP: redhat-SADP","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.8.0-8.el9_8","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds-base","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","source":"ADP: redhat-SADP","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.2.4-19.el9_2","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds-base","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","source":"ADP: redhat-SADP","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.4.5-26.el9_4","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds-base","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","source":"ADP: redhat-SADP","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.6.1-22.el9_6","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://catalog.redhat.com/software/containers/","packageName":"dirsrv/dirsrv-container-rhel10","product":"Red Hat Directory Server 13.2","source":"ADP: redhat-SADP","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1783452100","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"redhat-ds:12/389-ds-base","product":"Red Hat Directory Server 12","source":"ADP: redhat-SADP","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds-base","product":"Red Hat Directory Server 13","source":"ADP: redhat-SADP","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds-base","product":"Red Hat Enterprise Linux 6","source":"ADP: redhat-SADP","vendor":"Red Hat","versions":[]}],"cveId":"CVE-2026-11774","cwes":["CWE-190"],"description":"An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), adding sizeof(uint32_t) to a crafted SASL packet length prefix of 0xFFFFFFFC causes unsigned wraparound to zero, bypassing the nsslapd-maxsasliosize limit and leading to a heap buffer overflow of up to approximately 2 megabytes of attacker-controlled data. After a successful SASL bind with integrity protection (SSF > 0), a remote attacker can cause a Denial of Service (DoS) or achieve Remote Code Execution (RCE). In FreeIPA and Red Hat Identity Management deployments, any domain user with a valid Kerberos ticket, enrolled host, or service account can trigger this vulnerability over the network. This flaw is independent of CVE-2025-14905, which patched schema.c only and did not modify sasl_io.c.","epss":{"date":"2026-11-04","percentile":0.52606,"score":0.00682},"exploits":[],"kev":null,"metrics":[{"score":7.6,"severity":"high","source":"CNA: redhat","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","version":"3.1"},{"score":7.6,"severity":"high","source":"ADP: redhat-SADP","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","version":"3.1"},{"score":7.6,"severity":"high","source":"NVD: secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","version":"3.1"},{"score":7.6,"severity":"high","source":"NVD: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","version":"3.1"}],"modifiedAt":1793830672423,"publishedAt":1781200474539,"references":[{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36195"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36196"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36197"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36198"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36200"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36201"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36202"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36204"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36205"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36206"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36208"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36209"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36585"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36641"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36660"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36670"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36671"},{"source":"CNA: redhat","tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-11774"},{"source":"CNA: redhat","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2484916"},{"source":"ADP: redhat-SADP","tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-11774"},{"source":"ADP: redhat-SADP","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2484916"},{"source":"ADP: redhat-SADP","tags":["x_sadp-csaf-vex"],"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-11774.json"},{"source":"ADP: redhat-SADP","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36205"},{"source":"ADP: redhat-SADP","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36200"},{"source":"ADP: redhat-SADP","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36670"},{"source":"ADP: redhat-SADP","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36196"},{"source":"ADP: redhat-SADP","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36201"},{"source":"ADP: redhat-SADP","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36206"},{"source":"ADP: redhat-SADP","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36202"},{"source":"ADP: redhat-SADP","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36197"},{"source":"ADP: redhat-SADP","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36585"},{"source":"ADP: redhat-SADP","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36198"},{"source":"ADP: redhat-SADP","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36671"},{"source":"ADP: redhat-SADP","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36195"},{"source":"ADP: redhat-SADP","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36204"},{"source":"ADP: redhat-SADP","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36208"},{"source":"ADP: redhat-SADP","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36641"},{"source":"ADP: redhat-SADP","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36209"},{"source":"ADP: redhat-SADP","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36660"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36195"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36196"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36197"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36198"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36200"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36201"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36202"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36204"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36205"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36206"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36208"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36209"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36585"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36641"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36660"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36670"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36671"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/security/cve/CVE-2026-11774"},{"source":"secalert@redhat.com","tags":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2484916"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36195"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36196"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36197"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36198"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36200"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36201"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36202"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36204"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36205"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36206"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36208"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36209"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36585"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36641"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36660"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36670"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:36671"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"url":"https://access.redhat.com/security/cve/CVE-2026-11774"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2484916"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","tags":[],"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-11774.json"}],"remediation":[{"kind":"workaround","source":"CNA: redhat","text":"No complete workaround exists; nsslapd-maxsasliosize is bypassed by the integer overflow. Mitigations that reduce exposure: restrict SASL mechanisms (disable DIGEST-MD5 if not required; GSSAPI cannot be disabled in FreeIPA/IdM without breaking Kerberos authentication); firewall LDAP ports (389/636) to trusted networks; monitor for SASL-framed packets with length prefix 0xFFFFFFFC through 0xFFFFFFFF; enable audit logging (nsslapd-auditlog-logging-enabled: on); on RHEL 8, upgrading glibc reduces RCE exploitability but does not eliminate DoS."},{"kind":"fix","source":"ADP: redhat-SADP","text":"RHSA-2026:36205: Red Hat Enterprise Linux Server (v. 7 ELS), Red Hat Enterprise Linux Server Optional (v. 7 ELS)\n\nRHSA-2026:36200: Red Hat Directory Server 11.9 for RHEL 8\n\nRHSA-2026:36670: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)\n\nRHSA-2026:36196: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\n\nRHSA-2026:36201: Red Hat Enterprise Linux AppStream (v. 8)\n\nRHSA-2026:36206: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\n\nRHSA-2026:36202: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)\n\nRHSA-2026:36197: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)\n\nRHSA-2026:36585: Red Hat Enterprise Linux AppStream E4S (v.9.2)\n\nRHSA-2026:36198: Red Hat Enterprise Linux AppStream E4S (v.9.4)\n\nRHSA-2026:36671: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)\n\nRHSA-2026:36195: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)\n\nRHSA-2026:36204: Red Hat Directory Server 11.5 E4S for RHEL 8\n\nRHSA-2026:36208: Red Hat Directory Server 11.7 E4S for RHEL 8\n\nRHSA-2026:36641: Red Hat Directory Server 12.2 E4S for RHEL 9\n\nRHSA-2026:36209: Red Hat Directory Server 12.4 E4S for RHEL 9\n\nRHSA-2026:36660: Red Hat Directory Server 13.2"},{"kind":"workaround","source":"ADP: redhat-SADP","text":"No complete workaround exists; nsslapd-maxsasliosize is bypassed by the integer overflow. Mitigations that reduce exposure: restrict SASL mechanisms (disable DIGEST-MD5 if not required; GSSAPI cannot be disabled in FreeIPA/IdM without breaking Kerberos authentication); firewall LDAP ports (389/636) to trusted networks; monitor for SASL-framed packets with length prefix 0xFFFFFFFC through 0xFFFFFFFF; enable audit logging (nsslapd-auditlog-logging-enabled: on); on RHEL 8, upgrading glibc reduces RCE exploitability but does not eliminate DoS."}],"revision":"a4d5fee034776c7e88b4d0bf61e38d11a172d5ab547249679fad220764c5b764","sources":[{"modifiedAt":1793829067635,"name":"CNA: redhat","retrievedAt":1793830326273,"url":"https://www.cve.org/CVERecord?id=CVE-2026-11774"},{"modifiedAt":1793830672423,"name":"NVD","retrievedAt":1793838021909,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11774"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793830356339,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-11774"}],"ssvc":{"assessedAt":1781277246174,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow","updatedAt":1793838021909}