CVE-2018-14648
Fixed in a distro release EPSS 7%CVSS 7.5
A flaw was found in 389 Directory Server. A specially crafted search query could lead to excessive CPU consumption in the do_search() function. An unauthenticated attacker could use this flaw to provoke a denial of service.
Products: fedoraproject 389_directory_server, debian_linux, redhat enterprise_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | 389-ds-base | 1.3.8.4-15.amzn2.0.1 |
| Amazon Linux 2 | 389-ds-base-devel | 1.3.8.4-15.amzn2.0.1 |
| Amazon Linux 2 | 389-ds-base-libs | 1.3.8.4-15.amzn2.0.1 |
| Amazon Linux 2 | 389-ds-base-snmp | 1.3.8.4-15.amzn2.0.1 |
| Debian 12 | 389-ds-base | 1.4.0.18-1 |
| Debian 13 | 389-ds-base | 1.4.0.18-1 |
| Debian 8 | 389-ds-base | 1.3.3.5-4+deb8u4 |
| Red Hat Enterprise Linux 7 | 389-ds-base | 0:1.3.8.4-15.el7 |
| Red Hat Enterprise Linux 7 | 389-ds-base-debuginfo | 0:1.3.8.4-15.el7 |
| Red Hat Enterprise Linux 7 | 389-ds-base-devel | 0:1.3.8.4-15.el7 |
| Red Hat Enterprise Linux 7 | 389-ds-base-libs | 0:1.3.8.4-15.el7 |
| Red Hat Enterprise Linux 7 | 389-ds-base-snmp | 0:1.3.8.4-15.el7 |
| Red Hat rhel eus 7.5 | 389-ds-base | 0:1.3.7.5-29.el7_5 |
| Red Hat rhel eus 7.5 | 389-ds-base-debuginfo | 0:1.3.7.5-29.el7_5 |
| Red Hat rhel eus 7.5 | 389-ds-base-devel | 0:1.3.7.5-29.el7_5 |
| Red Hat rhel eus 7.5 | 389-ds-base-libs | 0:1.3.7.5-29.el7_5 |
| Red Hat rhel eus 7.5 | 389-ds-base-snmp | 0:1.3.7.5-29.el7_5 |
| SUSE Linux Enterprise Module for Server Applications 15 | 389-ds | 1.4.0.26~git0.8a2d3de6f-4.14.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP1 | 389-ds | 1.4.0.26~git0.8a2d3de6f-4.14.1 |
| Ubuntu 26.04 LTS | 389-ds-base | no fix |
| Ubuntu Pro 16.04 LTS | 389-ds-base | no fix |
| Ubuntu Pro 18.04 LTS | 389-ds-base | no fix |
| openSUSE Tumbleweed | 389-ds | 2.0.10~git0.21dd2802c-1.1 |