The Red Hat Directory Server 389-ds-base package for Red Hat Enterprise Linux 9 and related variants contains two security vulnerabilities: CVE-2026-11610 is a heap buffer overflow in the sasl_io_recv() function triggered by a padded SASL UNBIND operation; CVE-2026-11774 is an integer overflow in the SASL packet length that bypasses size limits, also leading to a heap buffer overflow. These vulnerabilities could allow an attacker with local privileges to cause memory corruption, potentially leading to code execution or denial of service. The vulnerabilities have been rated with a CVSS 3.1 base score of 8.8 (high severity) with network attack vector, low attack complexity, requiring privileges but no user interaction, and impacting confidentiality, integrity, and availability. Red Hat has released security updates for 389-ds-base in Red Hat Enterprise Linux 9.8 and related Extended Update Support versions to address these issues.

Successful exploitation of these heap buffer overflow vulnerabilities could lead to arbitrary code execution or denial of service on affected systems running Red Hat Directory Server 389-ds-base. The vulnerabilities impact confidentiality, integrity, and availability of the affected service. The CVSS score of 8.8 indicates high severity. Exploitation requires local privileges but no user interaction. There are no known exploits in the wild at the time of this advisory.

Red Hat has provided official security updates fixing these vulnerabilities in 389-ds-base packages for Red Hat Enterprise Linux 9. Users should apply the updates available in Red Hat Enterprise Linux 9.8 and Extended Update Support 9.8 releases as documented in the Red Hat advisory RHSA-2026:36195 and the update instructions at https://access.redhat.com/articles/11258. Applying these updates fully mitigates the vulnerabilities. No additional mitigation steps are required beyond applying the official patches.