CVE-2018-10850

2018-06-1320:29:00

Debian Security Bug Tracker

security-tracker.debian.org

0.011 Low

EPSS

Percentile

84.3%

JSON

389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds-base handles persistent search, resulting in a crash if the server is under load. An anonymous attacker could use this flaw to trigger a denial of service.

OSVersionArchitecturePackageVersionFilename
Debian12all389-ds-base< 1.4.0.15-1389-ds-base_1.4.0.15-1_all.deb
Debian11all389-ds-base< 1.4.0.15-1389-ds-base_1.4.0.15-1_all.deb
Debian10all389-ds-base< 1.4.0.15-1389-ds-base_1.4.0.15-1_all.deb
Debian999all389-ds-base< 1.4.0.15-1389-ds-base_1.4.0.15-1_all.deb
Debian13all389-ds-base< 1.4.0.15-1389-ds-base_1.4.0.15-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	389-ds-base	< 1.4.0.15-1	389-ds-base_1.4.0.15-1_all.deb
Debian	11	all	389-ds-base	< 1.4.0.15-1	389-ds-base_1.4.0.15-1_all.deb
Debian	10	all	389-ds-base	< 1.4.0.15-1	389-ds-base_1.4.0.15-1_all.deb
Debian	999	all	389-ds-base	< 1.4.0.15-1	389-ds-base_1.4.0.15-1_all.deb
Debian	13	all	389-ds-base	< 1.4.0.15-1	389-ds-base_1.4.0.15-1_all.deb