Lucene search

K
redhatcveRedhat.comRH:CVE-2018-1089
HistoryMay 07, 2018 - 3:19 p.m.

CVE-2018-1089

2018-05-0715:19:06
redhat.com
access.redhat.com
13

0.037 Low

EPSS

Percentile

91.8%

It was found that 389-ds-base did not properly handle long search filters with characters needing escapes, possibly leading to buffer overflows. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service.