A NULL pointer dereference vulnerability exists in 389-ds-base triggered by a ModifyDN (rename) operation that uses an attribute's schema alias name instead of its canonical name as the new relative distinguished name. An authenticated attacker with ModifyDN permission can exploit this to crash the directory server, causing denial of service. This issue requires non-default access control configurations granting ModifyDN rights to non-administrative users. Default configurations are not affected.