It was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17, was incorrectly applied in RHEL 7.5. An attacker would still be able to provoke excessive CPU consumption leading to a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade 389-ds-base-libsUpgrade 389-ds-base-develUpgrade 389-ds-baseUpgrade 389-ds-base-debuginfoUpgrade 389-ds-base-snmp | Aug 28, 2019 | Aug 2, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade 389-ds-baseUpgrade 389-ds-base-libs | Jan 20, 2021 | Aug 2, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade 389-ds-base-libsUpgrade 389-ds-base | Dec 16, 2020 | Aug 2, 2019 |
| Redhat_linux | — | Upgrade 389-ds-base-develNo solution existsUpgrade 389-ds-baseUpgrade 389-ds-base-snmpUpgrade 389-ds-base-debuginfoUpgrade 389-ds-base-libs | Jul 17, 2019 | Jul 16, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub