5.9
Moyenne
CVE-2018-10850 389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds-base handles…
Description
389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds-base handles persistent search, resulting in a crash if the server is under load. An anonymous attacker could use this flaw to trigger a denial of service.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| 389-ds-base | Versions non publiées |
Références
- RHSA-2018:2757 access.redhat.com
- pagure.io pagure.io
- pagure.io pagure.io
- [debian-lts-announce] 20180715 [SECURITY] [DLA 1428-1] 389-ds-base security update lists.debian.org
- bugzilla.redhat.com bugzilla.redhat.com
- openSUSE-SU-2019:1397 lists.opensuse.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de 389-ds-base
Les 5 CVE de 389-ds-base →
CVE-2019-14824
A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute…
6.5
Moyenne
CVE-2018-14624
A vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16
7.5
Élevée
CVE-2018-10871
389-ds-base before versions 1.3.8.5, 1.4.0.12 is vulnerable to a Cleartext Storage of Sensitive Information
3.8
Faible
CVE-2017-2668
389-ds-base before versions 1.3.5.17 and 1.3.6.10 is vulnerable to an invalid pointer dereference in the way LDAP bind…
6.5
Moyenne