Medium severity · published Jun 8, 2026
CVE-2026-11611
389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditions
6.5
CVSS
0.2%
EPSS
No
On KEV
Description
A flaw was found in 389 Directory Server. The Content Synchronization persistent search plugin allows unbounded memory growth when an authenticated client stops reading sync responses, enabling denial of service. Additional race conditions in plugin thread lifecycle can cause crashes during connection teardown or shutdown.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 15% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RH
Red Hat Directory Server 11 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Directory Server 12 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Directory Server 13 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 10 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 7 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 8 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 9 · Red Hat
All versions, or not specified · source: vendor
3D
389 Directory Server · Redhat
All versions, or not specified · source: NVD
DS
Directory Server · Redhat
11.0; 12.0; 13.0 · source: NVD
EL
Enterprise Linux · Redhat
7.0; 8.0; 9.0; 10.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-11611
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-11611
Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-11611
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=2485424
More from Red Hat Directory Server 11
9.0
CVE-2026-86345
389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result
8.4
CVE-2026-19843
389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor
7.5
CVE-2026-86344
389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue
7.5
CVE-2026-76560
389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn
6.5
CVE-2026-78701
389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos