CVE-2018-1054CWE-120

CVE-2018-1054: vulnerability in Red Hat, Inc. 389-ds-base

Published · Updated

Follow this CVE+ Monitor 389-ds-base+ Monitor 389-ds-base

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 4.6%
An out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search filters, affecting all versions including 1.4.x. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service.
Affected products
Red Hat, Inc. · 389-ds-base
Related CVEs — Red Hat, Inc. 389-ds-base

In the same product, most dangerous first.

CVE-2017-15134—CVE-2017-15134EPSS 3.9%CVE-2017-15135—CVE-2017-15135EPSS 3.8%