CVE Watch31 jul 2026

CVE-2026-15722

A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copie

CVSS

7.5

Alto

EPSS

0.5%

p41

KEV

—

Exploit Today

0-100

Publicado: 31 jul 2026 · Última mod.: 31 jul 2026 · CWE-121

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP server by sending a crafted StartNSDS50ReplicationRequest extended operation containing a replica ID field with more than 16 digit characters. The overflow occurs during payload decoding, before any authorization check. Stack protectors limit impact to denial of service.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-678229.8 CRÍ

—

——0Tenda W6-S 1.0.0.4(510) contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow.19h CVE-2026-438327.5 ALT

3.8%

——1Full details and mitigation steps are currently restricted and will be published at a later date.18h CVE-2026-438317.5 ALT

3.8%

——1Full details and mitigation steps are currently restricted and will be published at a later date.18h CVE-2026-438297.5 ALT

3.8%

——1Full details and mitigation steps are currently restricted and will be published at a later date.18h CVE-2026-105358.4 ALT

2.3%

——1IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc.1d CVE-2026-11771—

26.9%

——8OpenVPN version 2.1.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows attackers via an off-by-one buffer write in the NTLM proxy authentication to potentially cause a crash via a crafted NTLM response from a malicious proxy server2d