{
  "cveId": "CVE-2026-11884",
  "url": "https://patchblox.com/security/cve/CVE-2026-11884",
  "summary": "CVE-2026-11884 is fixed in 13 products on 1 platform, first by SUSE-SU-2026:3136-1, released July 20, 2026. It is not reported as exploited. Patch Radar priority: Urgent.",
  "title": "389-ds: remote code execution and denial of service via heap buffer overflow (bsc#1268115).",
  "description": "remote code execution and denial of service via heap buffer overflow (bsc#1268115).",
  "published": "2026-07-20T15:10:10Z",
  "severity": "critical",
  "epss": 0.00349,
  "epssPercentile": 0.28853,
  "priority": "Urgent",
  "priorityTier": 2,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "389-ds",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "3.0.6~git382.7a51ea5f5-160000.1.1",
      "fix": "OPENSUSE-SU-2026:21691-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21691-1",
      "released": "2026-08-30T14:40:58Z"
    },
    {
      "platform": "linux",
      "product": "389-ds",
      "release": "sles 15.6",
      "fixedVersion": "2.2.10~git255.752643c78-150600.8.32.1",
      "fix": "SUSE-SU-2026:3136-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3136-1",
      "released": "2026-07-20T15:10:10Z"
    },
    {
      "platform": "linux",
      "product": "389-ds",
      "release": "sles 15.7",
      "fixedVersion": "2.7.0~git212.9b0755edb-150700.3.19.1",
      "fix": "SUSE-SU-2026:3138-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3138-1",
      "released": "2026-07-20T15:10:54Z"
    },
    {
      "platform": "linux",
      "product": "389-ds",
      "release": "sles 16.0",
      "fixedVersion": "3.0.6~git382.7a51ea5f5-160000.1.1",
      "fix": "SUSE-SU-2026:23574-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-23574-1",
      "released": "2026-08-30T14:40:36Z"
    },
    {
      "platform": "linux",
      "product": "389-ds-base",
      "release": "Fedora 43",
      "fixedVersion": "3.1.5-4.fc43",
      "fix": "FEDORA-2026-0B8BC362B1",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-0b8bc362b1",
      "released": "2026-09-07T21:23:55Z"
    },
    {
      "platform": "linux",
      "product": "389-ds-base-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "3.1.5-4.fc43",
      "fix": "FEDORA-2026-0B8BC362B1",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-0b8bc362b1",
      "released": "2026-09-07T21:23:55Z"
    },
    {
      "platform": "linux",
      "product": "389-ds-base-debugsource",
      "release": "Fedora 43",
      "fixedVersion": "3.1.5-4.fc43",
      "fix": "FEDORA-2026-0B8BC362B1",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-0b8bc362b1",
      "released": "2026-09-07T21:23:55Z"
    },
    {
      "platform": "linux",
      "product": "389-ds-base-devel",
      "release": "Fedora 43",
      "fixedVersion": "3.1.5-4.fc43",
      "fix": "FEDORA-2026-0B8BC362B1",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-0b8bc362b1",
      "released": "2026-09-07T21:23:55Z"
    },
    {
      "platform": "linux",
      "product": "389-ds-base-libs",
      "release": "Fedora 43",
      "fixedVersion": "3.1.5-4.fc43",
      "fix": "FEDORA-2026-0B8BC362B1",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-0b8bc362b1",
      "released": "2026-09-07T21:23:55Z"
    },
    {
      "platform": "linux",
      "product": "389-ds-base-libs-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "3.1.5-4.fc43",
      "fix": "FEDORA-2026-0B8BC362B1",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-0b8bc362b1",
      "released": "2026-09-07T21:23:55Z"
    },
    {
      "platform": "linux",
      "product": "389-ds-base-robdb-libs",
      "release": "Fedora 43",
      "fixedVersion": "3.1.5-4.fc43",
      "fix": "FEDORA-2026-0B8BC362B1",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-0b8bc362b1",
      "released": "2026-09-07T21:23:55Z"
    },
    {
      "platform": "linux",
      "product": "389-ds-base-robdb-libs-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "3.1.5-4.fc43",
      "fix": "FEDORA-2026-0B8BC362B1",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-0b8bc362b1",
      "released": "2026-09-07T21:23:55Z"
    },
    {
      "platform": "linux",
      "product": "389-ds-base-snmp",
      "release": "Fedora 43",
      "fixedVersion": "3.1.5-4.fc43",
      "fix": "FEDORA-2026-0B8BC362B1",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-0b8bc362b1",
      "released": "2026-09-07T21:23:55Z"
    },
    {
      "platform": "linux",
      "product": "389-ds-base-snmp-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "3.1.5-4.fc43",
      "fix": "FEDORA-2026-0B8BC362B1",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-0b8bc362b1",
      "released": "2026-09-07T21:23:55Z"
    },
    {
      "platform": "linux",
      "product": "cockpit-389-ds",
      "release": "Fedora 43",
      "fixedVersion": "3.1.5-4.fc43",
      "fix": "FEDORA-2026-0B8BC362B1",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-0b8bc362b1",
      "released": "2026-09-07T21:23:55Z"
    },
    {
      "platform": "linux",
      "product": "python3-lib389",
      "release": "Fedora 43",
      "fixedVersion": "3.1.5-4.fc43",
      "fix": "FEDORA-2026-0B8BC362B1",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-0b8bc362b1",
      "released": "2026-09-07T21:23:55Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-11T07:45:43Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}