VULNERABILITY INTELLIGENCE

CVE-2026-12528

CVSS score5.4 MEDIUM
EPSS probability0.23%
CISA KEVNot currently listed
Published2026-06-17
Last modified2026-06-28
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Description

A flaw was found in 389 Directory Server in the __aclp__normalize_acltxt() function of aclparse.c. A malformed ACI (Access Control Instruction) string can trigger heap-buffer-overflow writes and reads during ACI parsing. The function fails to validate that the ACI keyword has sufficient length after whitespace stripping, leading to a 1-byte out-of-bounds write and subsequent out-of-bounds reads. An authenticated user with write access to the aci attribute could send a crafted ACI value to silently corrupt heap memory in the directory server process.

Weakness classification

  • secalert@redhat.com: CWE-787

Primary references