Arbitrary Code Execution

2020-04-1001:01:44

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.012 Low

EPSS

Percentile

85.0%

JSON

redhat-ds-base is vulnerable to arbitrary code execution. The vulnerability exists as a flaw was found in the way Red Hat Directory Server handled simple paged result searches. If an unauthenticated user were able to send multiple simple paged search requests to Directory Server, it could cause the server to crash.

CPENameOperatorVersion
redhat-ds-baseeq8.2.1__1.el5dsrv
redhat-ds-baseeq8.0.3__16.el5dsrv
redhat-ds-baseeq8.0.4__7.el5dsrv
redhat-ds-baseeq8.0.3__16.el4dsrv
redhat-ds-baseeq8.0.0__13.el4dsrv
redhat-ds-baseeq8.2.0__14.el4dsrv
redhat-ds-baseeq8.1.1__1.el5dsrv
redhat-ds-baseeq8.0.0__12.el5dsrv
redhat-ds-baseeq8.0.0__14.el4dsrv
redhat-ds-baseeq8.1.0__0.14.el5dsrv

Name	Operator	Version
redhat-ds-base	eq	8.2.1__1.el5dsrv
redhat-ds-base	eq	8.0.3__16.el5dsrv
redhat-ds-base	eq	8.0.4__7.el5dsrv
redhat-ds-base	eq	8.0.3__16.el4dsrv
redhat-ds-base	eq	8.0.0__13.el4dsrv
redhat-ds-base	eq	8.2.0__14.el4dsrv
redhat-ds-base	eq	8.1.1__1.el5dsrv
redhat-ds-base	eq	8.0.0__12.el5dsrv
redhat-ds-base	eq	8.0.0__14.el4dsrv
redhat-ds-base	eq	8.1.0__0.14.el5dsrv