High

389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing

Type: advisorySource: Official CVE List1 source record

A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP server by sending a crafted StartNSDS50ReplicationRequest extended operation containing a replica ID field with more than 16 digit characters. The overflow occurs during payload decoding, before any authorization check. Stack protectors limit impact to denial of service.

Announced 31 Jul 2026Group revision 1

Original source ↗

CVE-2026-15722

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-15722

Red Hat Directory Server 11.5 E4S for RHEL 8

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Directory Server 11.7 E4S for RHEL 8

Source reference: /containers/cna/affected/1/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Directory Server 11.9 for RHEL 8

Source reference: /containers/cna/affected/2/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Directory Server 12.2 E4S for RHEL 9

Source reference: /containers/cna/affected/3/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Directory Server 12.4 E4S for RHEL 9

Source reference: /containers/cna/affected/4/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 10

Source reference: /containers/cna/affected/5/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 10.0 Extended Update Support

Source reference: /containers/cna/affected/6/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 7 Extended Lifecycle Support

Source reference: /containers/cna/affected/7/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8

Source reference: /containers/cna/affected/8/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

Source reference: /containers/cna/affected/9/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

Source reference: /containers/cna/affected/10/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

Source reference: /containers/cna/affected/11/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On

Source reference: /containers/cna/affected/12/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Source reference: /containers/cna/affected/13/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

Source reference: /containers/cna/affected/14/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9

Source reference: /containers/cna/affected/15/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Source reference: /containers/cna/affected/16/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Source reference: /containers/cna/affected/17/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9.6 Extended Update Support

Source reference: /containers/cna/affected/18/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Directory Server 12

Source reference: /containers/cna/affected/19/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Directory Server 13

Source reference: /containers/cna/affected/20/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 6

Source reference: /containers/cna/affected/21/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "cpes": [
      "cpe:/a:redhat:directory_server_e4s:11.5::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Directory Server 11.5 E4S for RHEL 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "8060020260908152739.0ca98e7e",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "redhat-ds:11",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:directory_server_e4s:11.7::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Directory Server 11.7 E4S for RHEL 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "8080020260806114250.f969626e",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "redhat-ds:11",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:directory_server:11.9::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Directory Server 11.9 for RHEL 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "8100020260803140625.37ed7c03",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "redhat-ds:11",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:directory_server_e4s:12.2::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Directory Server 12.2 E4S for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "9020020260730155601.1674d574",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "redhat-ds:12",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:directory_server_e4s:12.4::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Directory Server 12.4 E4S for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "9040020260810131422.1674d574",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "redhat-ds:12",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:10.2"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.2.0-9.el10_2",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "389-ds-base",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux_eus:10.0"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.0.6-20.el10_0",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "389-ds-base",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:rhel_els:7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.3.11.1-14.el7_9",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "389-ds-base",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:8::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "8100020260806150504.25e700aa",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "389-ds:1.4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.4::appstream",
      "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "8040020260803141511.96015a92",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "389-ds:1.4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.4::appstream",
      "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
    "versions": [
      {
        "status": "unaffected",
        "version": "8040020260803141511.96015a92",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "389-ds:1.4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.6::appstream",
      "cpe:/a:redhat:rhel_eus_long_life:8.6::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "8060020260806120442.824efc52",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "389-ds:1.4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.6::appstream",
      "cpe:/a:redhat:rhel_eus_long_life:8.6::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
    "versions": [
      {
        "status": "unaffected",
        "version": "8060020260806120442.824efc52",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "389-ds:1.4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:8.8::appstream",
      "cpe:/a:redhat:rhel_tus:8.8::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
    "versions": [
      {
        "status": "unaffected",
        "version": "8080020260806114228.6dbb3803",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "389-ds:1.4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:8.8::appstream",
      "cpe:/a:redhat:rhel_tus:8.8::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
    "versions": [
      {
        "status": "unaffected",
        "version": "8080020260806114228.6dbb3803",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "389-ds:1.4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::appstream",
      "cpe:/a:redhat:enterprise_linux:9::crb"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.8.0-9.el9_8",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "389-ds-base",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:9.2::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.2.4-20.el9_2",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "389-ds-base",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:9.4::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.4.5-27.el9_4",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "389-ds-base",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_eus:9.6::appstream",
      "cpe:/a:redhat:rhel_eus:9.6::crb"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.6.1-23.el9_6",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "389-ds-base",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:directory_server:12"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Directory Server 12",
    "packageName": "redhat-ds:12/389-ds-base",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:directory_server:13"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Directory Server 13",
    "packageName": "389-ds-base",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:6"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 6",
    "packageName": "389-ds-base",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unknown"
  }
]

Related CVEs: CVE-2026-15722
Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event: #12516 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 00:09:21 GMT
Publisher date: Fri, 31 Jul 2026 09:18:50 GMT

Read the original announcement

Revision history

25 Oct 2026CVE-2026-15722 · Revision 1Source updated