The 389 Directory Server (389-ds-base) contains two vulnerabilities related to SASL packet processing. CVE-2026-11610 is a heap buffer overflow triggered by a padded SASL UNBIND message in the sasl_io_recv() function. CVE-2026-11774 is an integer overflow in the SASL packet length that bypasses size limits, leading to a heap buffer overflow. Both vulnerabilities could result in memory corruption and potentially allow an attacker to disrupt the service or execute arbitrary code. Red Hat has issued an important security update (389-ds-base-2.4.5-26.el9_4) for Red Hat Enterprise Linux 9.4 and related variants to fix these issues. The update is available for multiple architectures including x86_64, ppc64le, aarch64, and s390x. No CVSS scores are provided in the advisory, and no known exploits have been reported.

Successful exploitation of these vulnerabilities could lead to heap buffer overflows in the 389 Directory Server, potentially causing memory corruption. This may allow attackers to crash the LDAP service or execute arbitrary code with the privileges of the server process. The vulnerabilities affect the SASL authentication packet processing, which is critical for secure LDAP communications. No known exploits in the wild have been reported so far.

Red Hat has released an official security update for 389-ds-base (version 2.4.5-26.el9_4) that addresses these vulnerabilities. Users of affected Red Hat Enterprise Linux 9.4 variants should apply this update promptly. Detailed instructions for applying the update are available at https://access.redhat.com/articles/11258. No additional mitigations are indicated by the vendor advisory.