Threats Tagged 'cve-2026-78701'

A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication and Security Layer (SASL) UNBIND process. By sending a specially crafted request, the attacker can cause a connection to stall, leading to resource exhaustion and a Denial of Service (DoS) for the server.

CVE-2026-78701 is a vulnerability in the 389-ds-base component of Red Hat Enterprise Linux 10 that affects the Simple Authentication and Security Layer (SASL) UNBIND process. A remote, authenticated attacker can exploit this flaw by sending a specially crafted request to cause a connection stall, leading to resource exhaustion and a denial of service (DoS) condition on the server. The vulnerability has a CVSS score of 6.5, indicating a medium severity impact focused on availability. Red Hat has published an advisory indicating that this issue is related to an incomplete fix for a previous CVE and that updates are available for Red Hat Enterprise Linux 9, but no explicit patch information for version 10 is provided in the advisory content. No known exploits are reported in the wild at this time.