CVE-2017-15134CWE-120

CVE-2017-15134: vulnerability in Red Hat, Inc. 389-ds-base

Published · Updated

Follow this CVE+ Monitor 389-ds-base+ Monitor 389-ds-base

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 3.9%
A stack buffer overflow flaw was found in the way 389-ds-base 1.3.6.x before 1.3.6.13, 1.3.7.x before 1.3.7.9, 1.4.x before 1.4.0.5 handled certain LDAP search filters. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service.
Affected products
Red Hat, Inc. · 389-ds-base
Related CVEs — Red Hat, Inc. 389-ds-base

In the same product, most dangerous first.

CVE-2018-1054—CVE-2018-1054EPSS 4.6%CVE-2017-15135—CVE-2017-15135EPSS 3.8%