CVE-2019-10171

It was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17, was incorrectly applied in RHEL 7.5. An attacker would still be able to provoke excessive CPU consumption leading to a denial of service.

Score

CVSS 3.1 7.5 High

Status

Modified - secalert@redhat.com

Published

2019-08-02

Last modified

2024-08-04

Weaknesses

CWE-770

Affected products

• 389 Directory Server (Fedoraproject)
• 389-ds-base (Redhat)
• Enterprise Linux Server Eus (Redhat)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10171