This vulnerability in Red Hat Directory Server (389-ds-base) 11 is caused by improper handling of heap allocations when processing DNs with legacy-quoted values. Specifically, the server fails to close the heap allocation properly, allowing subsequent calls to reference the same memory pointer. This can result in a heap-buffer-overflow, enabling denial of service or arbitrary memory writes. The CVSS 3.1 base score is 5.3, indicating medium severity. No official remediation level or patch information is provided in the vendor advisory, and no known exploits are reported in the wild.

The vulnerability can cause denial of service or arbitrary memory write operations on affected Red Hat Directory Server 11 instances. There is no indication of confidentiality or integrity impacts. The attack vector is network-based with no privileges or user interaction required.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-16560 for current remediation guidance. No official fix or workaround is currently documented. Monitor the vendor advisory for updates and apply patches promptly once available.