Lucene search
Veracode Vulnerability DatabaseVERACODE:12806HistoryJan 15, 2019 - 9:22 a.m.
Denial Of Service (DoS)
2019-01-1509:22:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.037 Low
EPSS
Percentile
91.8%
389-ds-base is vulnerable to denial of service. A remote unauthenticated attacker is able to crash the application in a buffer overflow using a malicious LDAP request containing long search filters with unescaped characters.
References
www.securityfocus.com/bid/104137
access.redhat.com/errata/RHSA-2018:1364
access.redhat.com/errata/RHSA-2018:1380
access.redhat.com/security/updates/classification/#important
bugzilla.redhat.com/show_bug.cgi?id=1554720
bugzilla.redhat.com/show_bug.cgi?id=1559464
bugzilla.redhat.com/show_bug.cgi?id=1559760
bugzilla.redhat.com/show_bug.cgi?id=1559764
bugzilla.redhat.com/show_bug.cgi?id=1563079
bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1089
lists.debian.org/debian-lts-announce/2018/07/msg00018.html
Related
nessus
nessus
NewStart CGSL MAIN 4.05 : 389-ds-base Vulnerability (NS-SA-2019-0140)
2019-08-12 00:00:00
Oracle Linux 7 : 389-ds-base (ELSA-2018-1380)
2018-05-15 00:00:00
oraclelinux
oraclelinux
389-ds-base security and bug fix update
2018-05-14 00:00:00
389-ds-base security update
2018-05-09 00:00:00
debiancve
debiancve
CVE-2018-1089
2018-05-09 15:29:00
prion
prion
Buffer overflow
2018-05-09 15:29:00
mageia
mageia
Updated 389-ds-base packages fix security vulnerability
2018-05-16 11:24:56
checkpoint_advisories
checkpoint_advisories
openvas
openvas
Mageia: Security Advisory (MGASA-2018-0245)
2022-01-28 00:00:00
Huawei EulerOS: Security Advisory for 389-ds-base (EulerOS-SA-2018-1191)
2020-01-23 00:00:00
CentOS Update for 389-ds-base CESA-2018:1380 centos7
2018-06-05 00:00:00
cvelist
cvelist
CVE-2018-1089
2018-05-09 15:00:00
centos
centos
389 security update
2018-05-09 22:45:58
389 security update
2018-05-30 18:22:28
redhat
redhat
(RHSA-2018:1364) Important: 389-ds-base security update
2018-05-09 13:23:51
(RHSA-2018:1380) Important: 389-ds-base security and bug fix update
2018-05-14 12:56:39
nvd
nvd
CVE-2018-1089
2018-05-09 15:29:00
redhatcve
redhatcve
CVE-2018-1089
2018-05-07 15:19:06
amazon
amazon
Important: 389-ds-base
2018-06-08 17:56:00
Important: 389-ds-base
2018-06-08 18:32:00
ubuntucve
ubuntucve
CVE-2018-1089
2018-05-09 00:00:00
cve
cve
CVE-2018-1089
2018-05-09 15:29:00
osv
osv
389-ds-base - security update
2018-07-15 00:00:00
debian
debian
[SECURITY] [DLA 1428-1] 389-ds-base security update
2018-07-15 20:10:27