p PatchFirst

PatchFirst · Latest vulnerabilities

389-ds-base vulnerabilities

Vulnerabilities published for 389-ds-base in the last 30 days: 0. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerabilities: 2

  1. CVE-2018-1054

    High · CVSS 7.5EPSS 4.56%Fix available

    CVE-2018-1054

    An out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search filters, affecting all versions including 1.4.x. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service.

    • Update to 1.3.7.10-1
    Published Updated
  2. CVE-2017-15134

    High · CVSS 7.5EPSS 3.87%Fix available

    CVE-2017-15134

    A stack buffer overflow flaw was found in the way 389-ds-base 1.3.6.x before 1.3.6.13, 1.3.7.x before 1.3.7.9, 1.4.x before 1.4.0.5 handled certain LDAP search filters. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service.

    • Update to 1.3.7.9-1
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →