Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-117548— 389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of service

Quick assessment

Affected
Red Hat Red Hat Directory Server 11
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 389-ds-base 中发现了一个空指针解引用漏洞。当 ModifyDN（重命名）操作使用属性的模式别名（例如 "commonName"）而非其规范名称（例如 "cn"）作为新的相对可区分名称时，会触发此漏洞。拥有受影响条目 ModifyDN（重命名）权限的已认证攻击者可利用此漏洞导致目录服务器崩溃，从而引发拒绝服务（DoS）。

CVSS 6.5 · Medium

Possible ATT&CK Techniques 1 AI

T1499.006
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-117548

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of service
Source: CVE Program / CVE List V5
Vulnerability Description
A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN (rename) operation uses an attribute's schema alias name (such as "commonName") instead of its canonical name (such as "cn") as the new relative distinguished name. An authenticated attacker with the ModifyDN (rename) permission on the affected entry can use this flaw to crash the directory server, causing a denial of service.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
空指针解引用
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Red Hat Red Hat Directory Server 11 - cpe:/a:redhat:directory_server:11
Red Hat Red Hat Directory Server 12 - cpe:/a:redhat:directory_server:12
Red Hat Red Hat Directory Server 13 - cpe:/a:redhat:directory_server:13
Red Hat Red Hat Enterprise Linux 10 - cpe:/o:redhat:enterprise_linux:10
Red Hat Red Hat Enterprise Linux 6 - cpe:/o:redhat:enterprise_linux:6
Red Hat Red Hat Enterprise Linux 7 - cpe:/o:redhat:enterprise_linux:7
Red Hat Red Hat Enterprise Linux 8 - cpe:/o:redhat:enterprise_linux:8
Red Hat Red Hat Enterprise Linux 9 - cpe:/o:redhat:enterprise_linux:9

II. Public POCs for CVE-2026-117548

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-117548

请登录查看更多情报信息。

Other References for CVE-2026-117548 (2)

Same Patch Batch · Red Hat · 2026-10-29 · 9 CVEs total

CVE-2026-114488 7.4 HIGH Wildfly: wildfly-iiop: wildfly-ejb3: wildfly: authentication bypass on iiop ejb invocation
CVE-2026-15564 7.4 HIGH Wildfly-ejb: wildfly-iiop-openjdk: eap iiop listeners may permit unauthed deserialization
CVE-2026-19610 6.5 MEDIUM Wildfly-platform-mbean: wildfly-platform-mbean: rbac sensitive attribute read bypass for p
CVE-2026-117859 5.4 MEDIUM Keycloak-services: keycloak-services: par single-use bypass via flow restart
CVE-2026-117627 5.4 MEDIUM Keycloak-services: keycloak-services: jwt authorization grant bypasses identity provider l
CVE-2026-117688 5.3 MEDIUM Keycloak-services: keycloak-services: vault secret disclosure via client registration inst
CVE-2026-118030 4.2 MEDIUM Keycloak-services: keycloak-services: hotp race condition allows single otp code reuse acr
CVE-2026-85498 3.5 LOW Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow

IV. Related Vulnerabilities

Same product: Red Hat Directory Server 11
Same vendor: Red Hat
Same weakness: CWE-476