جزئیات آسیب‌پذیری
CVE-2026-9064
Red Hat Directory Server 12Red Hat Directory Server 13
389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)
CVSS 3.1
7.5بالا
شرح رسمی (انگلیسی)
A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function in the LDAP server does not enforce an upper bound on the number of controls per LDAP message. A remote, unauthenticated attacker can send a specially crafted LDAP request containing hundreds of thousands of minimal controls within the default maximum BER message size (2 MB), causing excessive CPU consumption and heap allocation on the server. Under concurrent exploitation, this leads to significant latency degradation, worker thread starvation, or out-of-memory termination, resulting in a denial of service.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (redhat) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Red Hat | Red Hat Directory Server 12 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Directory Server 12 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Directory Server 13 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Directory Server 13 | همه | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۲۰- https://access.redhat.com/security/cve/CVE-2026-9064 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2480093 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9064.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:26453 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26458 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26457 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26456 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26459 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26463 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26460 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26454 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26452 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26464 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26465 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26455 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26461 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26597 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26639 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26599 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27125 vendor-advisoryx_refsource_REDHAT
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۲/۳۰
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۸/۱۴
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- redhat
پیش‌بینی بهره‌برداری (EPSS)
۰٫۸۱٪
احتمال بهره‌برداری در ۳۰ روز
۵۷٫۲٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- جزئی
ضعف‌ها (CWE)
- CWE-770Allocation of Resources Without Limits or Throttling