A heap buffer overflow exists in the 389 Directory Server component of Red Hat Directory Server 11. Specifically, when audit logging is enabled, the create_masked_entry_string() function copies a fixed-length password mask into a heap buffer without checking if the buffer has sufficient space. If a short cleartext password is logged—possible only with non-default CLEAR password storage or a compromised replication peer—this results in a buffer overflow that corrupts heap memory and audit log output. The vulnerability has a CVSS v3.1 base score of 3.3 (low), with network attack vector, high attack complexity, requiring high privileges, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact. Vendor advisories do not explicitly confirm a patch or remediation status for this specific issue.

The vulnerability can lead to heap memory corruption and corrupted audit log output when a short cleartext password is logged under specific conditions. The impact is limited to integrity and availability with low severity. There is no confidentiality impact reported. Exploitation requires high privileges and is of high complexity, reducing the likelihood of exploitation. No known exploits are reported in the wild.

Patch status is not yet confirmed—check the vendor advisory for current remediation guidance. The Red Hat advisories linked do not explicitly mention a fix for this vulnerability. Users should monitor Red Hat's official advisories and apply updates to the 389 Directory Server component when a fix is released. Until then, consider disabling audit logging of cleartext passwords or using default password storage settings to reduce exposure.