CVE-2018-1054

An out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search filters, affecting all versions including 1.4.x. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service.

Score
CVSS 3.0 7.5 High
Status
Modified - secalert@redhat.com
Published
2018-03-07
Last modified
2024-09-17
Weaknesses
CWE-120, CWE-125

Affected products

References