CVE-2026-78701

Fixed in a distro release EPSS <1%CVSS 6.5

A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication and Security Layer (SASL) UNBIND process. By sending a specially crafted request, the attacker can cause a connection to stall, leading to resource exhaustion and a Denial of Service (DoS) for the server.

Published 2026-08-25 · CVE record · OSV

Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat Directory Server 13.2, Red Hat Directory Server 11, Red Hat Directory Server 12, Red Hat Directory Server 13, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8

Distro releases