https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T05:19:21.086304+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-11789 CVE-2026-11789 — 389-ds-base: 389-ds-base: smd5 password storage plugin salt length integer underflow crash 2026-10-09T05:19:21.087602+00:00

Affected: Red Hat Directory Server 11, Red Hat Directory Server 12, Red Hat Directory Server 13, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9

A flaw was found in 389 Directory Server. The SMD5 password storage plugin performs unsigned integer underflow when computing salt length from a crafted password hash shorter than 16 bytes, causing a buffer over-read that crashes the LDAP server during authentication.