TI-2018-10503 CVE-2018-14638 · GHSA-89rw-hgr3-hvfx
Uncontrolled resource consumption in Fedora Project 389-ds-base
Priority LOW 38
A flaw was found in 389-ds-base before version 1.3.8.4-13.
RHSA-2018:2757
389-ds-base security and bug fix update
Released 2018-09-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) 389-ds-base-1.3.7.5-28.el7_5, 389-ds-base-devel-1.3.7.5-28.el7_5, 389-ds-base-libs-1.3.7.5-28.el7_5 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) 389-ds-base-1.3.7.5-28.el7_5, 389-ds-base-devel-1.3.7.5-28.el7_5, 389-ds-base-libs-1.3.7.5-28.el7_5 +1
- Red Hat Enterprise Linux Server (v. 7) 389-ds-base-1.3.7.5-28.el7_5, 389-ds-base-libs-1.3.7.5-28.el7_5
- Red Hat Enterprise Linux Server Optional (v. 7) 389-ds-base-1.3.7.5-28.el7_5, 389-ds-base-devel-1.3.7.5-28.el7_5, 389-ds-base-libs-1.3.7.5-28.el7_5 +1
- Red Hat Enterprise Linux Workstation (v. 7) 389-ds-base-1.3.7.5-28.el7_5, 389-ds-base-libs-1.3.7.5-28.el7_5
- Red Hat Enterprise Linux Workstation Optional (v. 7) 389-ds-base-devel-1.3.7.5-28.el7_5, 389-ds-base-snmp-1.3.7.5-28.el7_5
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) 389-ds-base-1.3.7.5-28.el7_5, 389-ds-base-libs-1.3.7.5-28.el7_5
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) 389-ds-base-1.3.7.5-28.el7_5, 389-ds-base-devel-1.3.7.5-28.el7_5, 389-ds-base-libs-1.3.7.5-28.el7_5 +1
Fixes 4 records
TI-2018-10489 CVE-2018-14624 · GHSA-2986-vwq2-p2w6
Improper input validation in [UNKNOWN] 389-ds-base
Priority LOW 37
A vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16.
TI-2018-07747 CVE-2018-10935 · GHSA-f8xp-r7x3-274c
Uncontrolled resource consumption in Red Hat 389-ds-base
Priority LOW 33
A flaw was found in the 389 Directory Server that allows users to cause a crash in the LDAP server using ldapsearch with server side sort.
TI-2018-07664 CVE-2018-10850 · GHSA-x8cw-gcmf-hx8h
Race condition in [UNKNOWN] 389-ds-base
Priority LOW 30
389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds-base handles persistent search, resulting in a crash if the server is under load.