7.5
Élevée
CVE-2018-14624 A vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16
Description
A vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16. The lock controlling the error log was not correctly used when re-opening the log file in log__error_emergency(). An attacker could send a flood of modifications to a very large DN, which would cause slapd to crash.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| 389-ds-base 1.4 | premières → 1.4.0.16 | Pas de correctif indiqué |
| 389-ds-base 1.3 | premières → 1.3.8.8 | Pas de correctif indiqué |
Références
- RHSA-2018:2757 access.redhat.com
- pagure.io pagure.io
- [debian-lts-announce] 20180929 [SECURITY] [DLA 1526-1] 389-ds-base security update lists.debian.org
- bugzilla.redhat.com bugzilla.redhat.com
- openSUSE-SU-2019:1397 lists.opensuse.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de 389-ds-base
Les 5 CVE de 389-ds-base →
CVE-2019-14824
A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute…
6.5
Moyenne
CVE-2018-10871
389-ds-base before versions 1.3.8.5, 1.4.0.12 is vulnerable to a Cleartext Storage of Sensitive Information
3.8
Faible
CVE-2017-2668
389-ds-base before versions 1.3.5.17 and 1.3.6.10 is vulnerable to an invalid pointer dereference in the way LDAP bind…
6.5
Moyenne
CVE-2018-10850
389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds-base handles…
5.9
Moyenne