CVE-2018-10850
Fixed in a distro release EPSS 2%CVSS 5.9
389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds-base handles persistent search, resulting in a crash if the server is under load. An anonymous attacker could use this flaw to trigger a denial of service.
Products: fedoraproject 389_directory_server, debian_linux, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | 389-ds-base | 1.3.7.5-28.amzn2.0.1 |
| Amazon Linux 2 | 389-ds-base-devel | 1.3.7.5-28.amzn2.0.1 |
| Amazon Linux 2 | 389-ds-base-libs | 1.3.7.5-28.amzn2.0.1 |
| Amazon Linux 2 | 389-ds-base-snmp | 1.3.7.5-28.amzn2.0.1 |
| Debian 12 | 389-ds-base | 1.4.0.15-1 |
| Debian 13 | 389-ds-base | 1.4.0.15-1 |
| Debian 8 | 389-ds-base | 1.3.3.5-4+deb8u1 |
| Red Hat Enterprise Linux 7 | 389-ds-base | 0:1.3.7.5-28.el7_5 |
| Red Hat Enterprise Linux 7 | 389-ds-base-debuginfo | 0:1.3.7.5-28.el7_5 |
| Red Hat Enterprise Linux 7 | 389-ds-base-devel | 0:1.3.7.5-28.el7_5 |
| Red Hat Enterprise Linux 7 | 389-ds-base-libs | 0:1.3.7.5-28.el7_5 |
| Red Hat Enterprise Linux 7 | 389-ds-base-snmp | 0:1.3.7.5-28.el7_5 |
| SUSE Linux Enterprise Module for Server Applications 15 | 389-ds | 1.4.0.3-4.7.52 |
| SUSE Linux Enterprise Module for Server Applications 15 SP1 | 389-ds | 1.4.0.3-4.7.52 |
| Ubuntu 26.04 LTS | 389-ds-base | no fix |
| Ubuntu Pro 16.04 LTS | 389-ds-base | no fix |
| Ubuntu Pro 18.04 LTS | 389-ds-base | no fix |
| openSUSE Leap 15.0 | 389-ds | 1.4.0.3-lp150.3.3.1 |
| openSUSE Tumbleweed | 389-ds | 2.0.10~git0.21dd2802c-1.1 |