Race Condition Vulnerability in 389 Directory Server by Red Hat
CVE-2018-10850

5.9MEDIUM

Key Information:

Vendor

[unknown]

Status
389-ds-base
Vendor
CVE Published:
13 June 2018

What is CVE-2018-10850?

The 389 Directory Server experiences a race condition when processing persistent search requests under high load. This issue may lead to server crashes, which an anonymous attacker could exploit to initiate a denial of service. Users running affected versions are advised to apply the necessary updates to remediate this issue and secure their environments.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

389-ds-base 389-ds-base 1.4.0.10

389-ds-base 389-ds-base 1.3.8.3

References

https://access.redhat.com/errata/RHSA-2018:2757
vendor-advisoryx_refsource_REDHAT
https://pagure.io/389-ds-base/issue/49768
x_refsource_CONFIRM
https://pagure.io/389-ds-base/c/8f04487f99a
x_refsource_CONFIRM

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.