CVE-2019-10171

It was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17, was incorrectly applied in RHEL 7.5. An attacker would still be able to provoke excessive CPU consumption leading to a denial of service...

CentOS Update for 389-ds-base CESA-2019:1896 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: 389-ds-base security and bug fix update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes

A flaw was discovered in jackson-databind, where it would permit polymorphic deserialization of a malicious object using blaze classes. An attacker could use this flaw to execute arbitrary code...

jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes

A flaw was discovered in jackson-databind, where it would permit polymorphic deserialization of a malicious object using blaze classes. An attacker could use this flaw to execute arbitrary code...

Denial Of Service (DoS)

389-ds-base is vulnerable to denial of service. It was found that a malicious search query could lead to excessive CPU consumption in the dosearch function. An unauthenticated attacker could use this flaw to provoke a denial of service. This vulnerability exists due to an insufficient fix for...

RHEL 7 : 389-ds-base (RHSA-2019:1789)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:1789 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server an...

jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes

A flaw was discovered in jackson-databind, where it would permit polymorphic deserialization of a malicious object using blaze classes. An attacker could use this flaw to execute arbitrary code...

SUSE SLED15 / SLES15 Security Update : 389-ds (SUSE-SU-2019:1207-2)

This update for 389-ds fixes the following issues : The following security vulnerabilities were addressed : CVE-2018-10850: Fixed a race condition on reference counter that would lead to a denial of service using persistent search bsc1096368 CVE-2017-15134: Fixed a remote denial of service via...

SUSE-SU-2019:1207-2 Security update for 389-ds

This update for 389-ds fixes the following issues: The following security vulnerabilities were addressed: - CVE-2018-10850: Fixed a race condition on reference counter that would lead to a denial of service using persistent search bsc1096368 - CVE-2017-15134: Fixed a remote denial of service via...

PT-2019-2576 · Red Hat · 389-Ds-Base +1

Name of the Vulnerable Software and Affected Versions: 389-ds-base versions 1.4.0.x before 1.4.0.17 Red Hat Enterprise Linux 7.5 Description: The issue is related to excessive CPU consumption, which can lead to a denial of service. An attacker can provoke this condition, causing the system to...

Fedora Update for drupal7-ds FEDORA-2019-5258ea8ae2

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 29 : drupal7-ds (2019-5258ea8ae2)

https://www.drupal.org/project/ds/releases/7.x-2.16 - https://www.drupal.org/project/ds/releases/7.x-2.15 - Critical - Cross site scripting XSS - SA-CONTRIB-2018-019 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...

Fedora 30 : drupal7-ds (2019-17dbcefff2)

https://www.drupal.org/project/ds/releases/7.x-2.16 - https://www.drupal.org/project/ds/releases/7.x-2.15 - Critical - Cross site scripting XSS - SA-CONTRIB-2018-019 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...

Fedora Update for drupal7-ds FEDORA-2019-17dbcefff2

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : 389-ds-base (EulerOS-SA-2019-1562)

According to the version of the 389-ds-base packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will be waited by the worker for at most...

EulerOS 2.0 SP3 : 389-ds-base (EulerOS-SA-2019-1561)

According to the version of the 389-ds-base packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will be waited by the worker for at most...

Denial Of Service

389-ds-base is vulnerable to denial of serviceDoS attacks. This is because the way slapd was handling certain errors during persistent search. An unauthenticated attacker could use this flaw to crash Directory Server...

Denial Of Service

389-ds-base is vulnerable to denial of serviceDoS attacks. This is because the lock controlling the error log is not correctly used when re-opening the log file in logerroremergency. An attacker could send a flood of modifications to a very large DN which may lead slapd to crash...

Denial Of Service (DoS)

389-ds-base is vulnerable to denial of service attacks. A remote, unauthenticated attacker could potentially use the flawed LDAP Search Filter component to make ns-slapd crash via a specially crafted LDAP request resulting in a system crash...