CVE-2018-14638 HIGH

CVE-2018-14638

Vendor Fedora Project

Product 389-ds-base

Weakness CWE-400

Published September 14, 2018

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

7.5/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality None

Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

A flaw was found in 389-ds-base before version 1.3.8.4-13. The process ns-slapd crashes in delete_passwdPolicy function when persistent search connections are terminated unexpectedly leading to remote denial of service.

Key dates

02Disclosure timeline

September 14, 2018 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-14638 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/400.html

Related vulnerabilities

04Related CVE

CVE-2026-44241 Micronaut Framework: Unbounded formattersCache in TimeConverterRegistrar Allows Memory Exhaustion via Accept-Language Header CVE-2023-25179 CVE-2025-26677 Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability CVE-2023-40583 libp2p nodes vulnerable to OOM attack CVE-2025-59529 simple protocol server ignores accepts unlimited connections and logs failures without limit