CVE-2019-10171
published 2019-08-02CVE-2019-10171: It was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17, was incorrectly applied in RHEL 7.5. An attacker would still be…
high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
It was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17, was incorrectly applied in RHEL 7.5. An attacker would still be able to provoke excessive CPU consumption leading to a denial of service.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | 389-ds-base | — | — |
| fedoraproject | 389_directory_server | >= 1.4.0.0 < 1.4.0.17 | 1.4.0.17 |
| redhat | enterprise_linux_server_eus | — | — |