CVE-2018-10850

CWE-362 — Race Condition7 documents7 sources
Severity
5.9MEDIUM
EPSS
1.5%
top 18.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Fedoraproject 389 Directory Server[unknown] 389-ds-baseDebian Debian Linux+7 more
Timeline
PublishedJun 13
Latest updateMay 14

Description

389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds-base handles persistent search, resulting in a crash if the server is under load. An anonymous attacker could use this flaw to trigger a denial of service.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.2 | Impact: 3.6

Affected Packages6 packages

▶Debian389-ds-base< 1.4.0.15-1+2
▶CVEListV5[unknown]/389-ds-base389-ds-base 1.3.8.3, 389-ds-base 1.4.0.10+1

Also affects: Debian Linux 8.0, Enterprise Linux 7.0, 7.6, 7.5

Patches

Patch: pagure.io ↗Patch: pagure.io ↗

🔴Vulnerability Details

3
GHSA
GHSA-x8cw-gcmf-hx8h: 389-ds-base before versions 1↗2022-05-14
▶
OSV
CVE-2018-10850: 389-ds-base before versions 1↗2018-06-13
▶
CVEList
CVE-2018-10850: 389-ds-base before versions 1↗2018-06-13
▶

📋Vendor Advisories

2
Red Hat
389-ds-base: race condition on reference counter leads to DoS using persistent search↗2018-06-06
▶
Debian
CVE-2018-10850: 389-ds-base - 389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition ...↗2018
▶

💬Community

1
Bugzilla
CVE-2018-10850 389-ds-base: race condition on reference counter leads to DoS using persistent search↗2018-06-06
▶