A remote denial-of-service vulnerability (CVE-2026-9064, CVSS 7.5 HIGH) exists in 389-ds-base where an unbounded LDAP controls count in `get_ldapmessage_controls_ext()` causes CPU and heap amplification. The vulnerability affects Red Hat Directory Server versions 11.0, 12.0, and 13.0, as well as Red Hat Enterprise Linux 6.0. The advisory provides updated packages for RHEL 10.0 EUS, but specific fixed version numbers for the affected Directory Server releases are not provided in the available text.
Red Hat Product Errata RHSA-2026:26457 - Security Advisory Issued: 2026-06-17 Updated: 2026-06-17 RHSA-2026:26457 - Security Advisory Overview Updated Packages Synopsis Important: 389-ds-base security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for 389-ds-base is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description 389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) (CVE-2026-9064) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2480093 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) CVEs CVE-2026-9064 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM 389-ds-base-3.0.6-18.el10_0.src.rpm SHA-256: 4974d53c98f062604f585742d69441afceb8da93322042e69cbb1d65a80e0c1a x86_64 389-ds-base-3.0.6-18.el10_0.x86_64.rpm SHA-256: 8e399fbcc9ff70cd317c4b812a13591b6587363a567bee4ce284ab5b5e13fcb3 389-ds-base-bdb-debuginfo-3.0.6-18.el10_0.x86_64.rpm SHA-256: d6929f36abdc57007204c161a2fd9671b7d6d9e4da0248ecdd4a052bbaabded1 389-ds-base-debuginfo-3.0.6-18.el10_0.x86_64.rpm SHA-256: 976ac7930de9307a08171e0d07b27962d0504ee0f9202cd9810fcf51d0ac8fcc 389-ds-base-debugsource-3.0.6-18.el10_0.x86_64.rpm SHA-256: 0096c7e273988f11633e9994e306a3a8af96a1e7f6cc18064379e5931bde12ff 389-ds-base-libs-3.0.6-18.el10_0.x86_64.rpm SHA-256: 1032ff415d9ac37314ec5a3cc0aa205f42b11046e34f3587ccb97ed253031f2e 389-ds-base-libs-debuginfo-3.0.6-18.el10_0.x86_64.rpm SHA-256: f92a613e281899d84b9a68cc2b9fb09b22fb0563436c661b0dc3b3bccf67d39c 389-ds-base-snmp-3.0.6-18.el10_0.x86_64.rpm SHA-256: 7e802056c2debd869500b327c57715958f30f3fd0b99f6e644fd7fcb31478b40 389-ds-base-snmp-debuginfo-3.0.6-18.el10_0.x86_64.rpm SHA-256: 9b88583bae0a4272854fb0bc7a2d01d05566ff56bb3791951e0d9a460dc75eae python3-lib389-3.0.6-18.el10_0.noarch.rpm SHA-256: c562a8f9984d2fd13633d40db091763d09afed1f9f5d71ead2548725ae1a0dbf Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 SRPM 389-ds-base-3.0.6-18.el10_0.src.rpm SHA-256: 4974d53c98f062604f585742d69441afceb8da93322042e69cbb1d65a80e0c1a s390x 389-ds-base-3.0.6-18.el10_0.s390x.rpm SHA-256: b558c6f114a9e700952c9d0fcd362e111fba262f42ff9bdd16dd0e249726d75d 389-ds-base-bdb-debuginfo-3.0.6-18.el10_0.s390x.rpm SHA-256: b408356994590533ead1f481054f47a8bcbdf790009e43d989944afdb3bdc366 389-ds-base-debuginfo-3.0.6-18.el10_0.s390x.rpm SHA-256: f65024dcd3a606d83b3a8dcfafd4fffd14947ee5a91c4264697f476532fd5d02 389-ds-base-debugsource-3.0.6-18.el10_0.s390x.rpm SHA-256: f8b95e36cdf9c47c03ea46045c5ce6f5bd3be8d5679ac04f6b478f1a8befbda4 389-ds-base-libs-3.0.6-18.el10_0.s390x.rpm SHA-256: 2453aa2efc58e47f2c092c1cf9e69aa574d2352ce57df52d7f1ca77a51dc1087 389-ds-base-libs-debuginfo-3.0.6-18.el10_0.s390x.rpm SHA-256: 0fb623bef0df740958be9de1a2a3c355c9338b93011829ce0aae8c5af031c9c1 389-ds-base-snmp-3.0.6-18.el10_0.s390x.rpm SHA-256: e13ea329130c0e10ad8cd04a05210feb50cc34252c98f5a98b914c799487477d 389-ds-base-snmp-debuginfo-3.0.6-18.el10_0.s390x.rpm SHA-256: 8eef97ae148983a5b7bb2eb0da14a6dc04b43d5305cc95875bc414e15a397ee0 python3-lib389-3.0.6-18.el10_0.noarch.rpm SHA-256: c562a8f9984d2fd13633d40db091763d09afed1f9f5d71ead2548725ae1a0dbf Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 SRPM 389-ds-base-3.0.6-18.el10_0.src.rpm SHA-256: 4974d53c98f062604f585742d69441afceb8da93322042e69cbb1d65a80e0c1a ppc64le 389-ds-base-3.0.6-18.el10_0.ppc64le.rpm SHA-256: e49c941040c599a93b23303dfb466304da14e898a0bf7ba0ce7cb668cc75f3e3 389-ds-base-bdb-debuginfo-3.0.6-18.el10_0.ppc64le.rpm SHA-256: 3c5417f9dfd603309305e7e40bca5438c109c877091353da8333c687a84ac3a0 389-ds-base-debuginfo-3.0.6-18.el10_0.ppc64le.rpm SHA-256: 0b091b77e1f3a63cc135dc257b768ef446d683a648380589849f4dfb4d354066 389-ds-base-debugsource-3.0.6-18.el10_0.ppc64le.rpm SHA-256: 70ae00dda57c5333a18444393373e3b1b32b06c0abf389681e8712a704b84c4d 389-ds-base-libs-3.0.6-18.el10_0.ppc64le.rpm SHA-256: 87ba1069333dfec9e4122877d01b61c2be7c66c00203ca2db1a5d88806cd531b 389-ds-base-libs-debuginfo-3.0.6-18.el10_0.ppc64le.rpm SHA-256: 6de57064dbdb2092410344851a4dccc4310d31d11a237df1848a0765d06643c9 389-ds-base-snmp-3.0.6-18.el10_0.ppc64le.rpm SHA-256: ebaa28856521074d9593682f7771c8936a7f4d76c468f2ff3faaa6ed9999eefc 389-ds-base-snmp-debuginfo-3.0.6-18.el10_0.ppc64le.rpm SHA-256: f6ffcdbdcd478655fcbf010384e365db445fbc680ccf3ad792ee278747d419a0 python3-lib389-3.0.6-18.el10_0.noarch.rpm SHA-256: c562a8f9984d2fd13633d40db091763d09afed1f9f5d71ead2548725ae1a0dbf Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 SRPM 389-ds-base-3.0.6-18.el10_0.src.rpm SHA-256: 4974d53c98f062604f585742d69441afceb8da93322042e69cbb1d65a80e0c1a aarch64 389-ds-base-3.0.6-18.el10_0.aarch64.rpm SHA-256: 0cdae7462e1dbf1aff5db54e3f513c6a09a94ede62e97b9180ef777dcdc7bd7a 389-ds-base-bdb-debuginfo-3.0.6-18.el10_0.aarch64.rpm SHA-256: 6b256b4e09a99453413a1521b66491c5d7e5c36336e8bb18bbe24f59bbdf2273 389-ds-base-debuginfo-3.0.6-18.el10_0.aarch64.rpm SHA-256: 379211d92d781736ac4af5b0509eff903a0ee9f6a0b96f6214e4038431ac59db 389-ds-base-debugsource-3.0.6-18.el10_0.aarch64.rpm SHA-256: 7bf4eedac8af697f5d003136bc3c5bef281a3e2861d37a6c2f972a89dc47d917 389-ds-base-libs-3.0.6-18.el10_0.aarch64.rpm SHA-256: 825766832f614ba2d373b6d1bc8745594557e151cc92045dda6cc6ea75837103 389-ds-base-libs-debuginfo-3.0.6-18.el10_0.aarch64.rpm SHA-256: a3f36e95f5c4265f35e95a66907cc0ca958d88caada5a54f46a506b775c4e5f1 389-ds-base-snmp-3.0.6-18.el10_0.aarch64.rpm SHA-256: feb2b60e5fdf0927fc5d8be03c48278b60b67e04403d52cb394ccba8ecbb483e 389-ds-base-snmp-debuginfo-3.0.6-18.el10_0.aarch64.rpm SHA-256: d5a05d874fb19feccd9c4e0e32e2db32cd9b9db6aab59ee22396b9cd956eecb7 python3-lib389-3.0.6-18.el10_0.noarch.rpm SHA-256: c562a8f9984d2fd13633d40db091763d09afed1f9f5d71ead2548725ae1a0dbf Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 SRPM x86_64 389-ds-base-bdb-3.0.6-18.el10_0.x86_64.rpm SHA-256: 14aef5f842b1aa63e9bc092f51e087578b4a23bb33bb9c61ebe01068a273054e 389-ds-base-bdb-debuginfo-3.0.6-18.el10_0.x86_64.rpm SHA-256: d6929f36abdc57007204c161a2fd9671b7d6d9e4da0248ecdd4a052bbaabded1 389-ds-base-debuginfo-3.0.6-18.el10_0.x86_64.rpm SHA-256: 976ac7930de9307a08171e0d07b27962d0504ee0f9202cd9810fcf51d0ac8fcc 389-ds-base-debugsource-3.0.6-18.el10_0.x86_64.rpm SHA-256: 0096c7e273988f11633e9994e306a3a8af96a1e7f6cc18064379e5931bde12ff 389-ds-base-devel-3.0.6-18.el10_0.x86_64.rpm SHA-256: ac20d31b751fc2fb043199332498d572f52a72808a230db9b6660d2a5862b4bb 389-ds-base-libs-debuginfo-3.0.6-18.el10_0.x86_64.rpm SHA-256: f92a613e281899d84b9a68cc2b9fb09b22fb0563436c661b0dc3b3bccf67d39c 389-ds-base-snmp-debuginfo-3.0.6-18.el10_0.x86_64.rpm SHA-256: 9b88583bae0a4272854fb0bc7a2d01d05566ff56bb3791951e0d9a460dc75eae Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 SRPM ppc64le 389-ds-base-bdb-3.0.6-18.el10_0.ppc64le.rpm SHA-256: 8535299be5bfc0f7c8eb2757ee8e6f0dd339f33919278af3d75307a0e939801b 389-ds-base-bdb-debuginfo-3.0.6-18.el10_0.ppc64le.rpm SHA-256: 3c5417f9dfd603309305e7e40bca5438c109c877091353da8333c687a84ac3a0 389-ds-base-debuginfo-3.0.6-18.el10_0.ppc64le.rpm SHA-256: 0b091b77e1f3a63cc135dc257b768ef446d683a648380589849f4dfb4d354066 389-ds-base-debugsource-3.0.6-18.el10_0.ppc64le.rpm SHA-256: 70ae00dda57c5333a18444393373e3b1b32b06c0abf389681e8712a704b84c4d 389-ds-base-devel-3.0.6-18.el10_0.ppc64le.rpm SHA-256: 657ea95243f8bb5812bf5335887a28d281b4252ccc5735d01f1ac9286f4a4003 389-ds-base-libs-debuginfo-3.0.6-18.el10_0.ppc64le.rpm SHA-256: 6de57064dbdb2092410344851a4dccc4310d31d11a237df1848a0765d06643c9 389-ds-base-snmp-debuginfo-3.0.6-18.el10_0.ppc64le.rpm SHA-256: f6ffcdbdcd478655fcbf010384e365db445fbc680ccf3ad792ee278747d419a0 Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Suppo