CVE-2018-10850 MEDIUM

CVE-2018-10850

Vendor [Unknown]
Product 389-ds-base
Weakness CWE-362
Published June 13, 2018
Last update August 5, 2024

CVSS base score

5.9/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds-base handles persistent search, resulting in a crash if the server is under load. An anonymous attacker could use this flaw to trigger a denial of service.

Key dates

02Disclosure timeline

June 13, 2018 CVE published
August 5, 2024 Record updated