Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:20868
HistoryJul 22, 2019 - 12:16 a.m.

Denial Of Service (DoS)

2019-07-2200:16:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13

0.05 Low

EPSS

Percentile

92.9%

389-ds-base is vulnerable to denial of service. It was found that a malicious search query could lead to excessive CPU consumption in the do_search() function. An unauthenticated attacker could use this flaw to provoke a denial of service. This vulnerability exists due to an insufficient fix for CVE-2018-14648.