CVE-2018-10850
Medium
Description
389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds-base handles persistent search, resulting in a crash if the server is under load. An anonymous attacker could use this flaw to trigger a denial of service.
SeverityMedium
CVSS5.9
Exploit probability—
Product
Fedoraproject 389 Directory Server
PublishedJun 13, 2018
First seenJun 13, 2018
Weakness typeCWE-362Race condition
How to fix
Update
- fedoraproject 389_directory_server1.4.0.10 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fedoraproject 389_directory_server | v < 1.4.0.10 | 1.4.0.10 |
| debian debian_linux | 8.0 | — |
| redhat enterprise_linux | 7.0 | — |
| redhat enterprise_linux_desktop | 7.0 | — |
| redhat enterprise_linux_server | 7.0 | — |
| redhat enterprise_linux_server_aus | 7.6 | — |
| redhat enterprise_linux_server_eus | 7.5, 7.6 | — |
| redhat enterprise_linux_server_tus | 7.6 | — |
| redhat enterprise_linux_workstation | 7.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.