Out-of-Bounds Memory Read Vulnerability in 389-ds-base by Red Hat
CVE-2018-1054
7.5HIGH
Summary
A flaw in the 389-ds-base product from Red Hat allows out-of-bounds memory reads when handling specific LDAP search filters. This vulnerability can be exploited by remote, unauthenticated attackers through specially crafted LDAP requests, leading to potential denial of service by crashing the ns-slapd process.
Affected Version(s)
389-ds-base all versions including upstream 1.4.x
References
EPSS Score
18% chance of being exploited in the next 30 days.
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved