389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search filters with characters needing escapes, possibly leading to buffer overflows. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade 389-ds-base-snmpUpgrade 389-ds-base-libsUpgrade 389-ds-baseUpgrade 389-ds-base-debuginfoUpgrade 389-ds-base-devel | Apr 27, 2020 | May 9, 2018 |
| Amazon_linux | — | Upgrade 389-ds-base | Jun 12, 2018 | May 9, 2018 |
| Centos_linux | — | Upgrade 389-ds-base-debuginfoUpgrade 389-ds-baseUpgrade 389-ds-base-develUpgrade 389-ds-base-libsUpgrade 389-ds-base-snmp | May 11, 2018 | May 9, 2018 |
| Debian | — | Upgrade 389-ds-base | Feb 19, 2019 | May 9, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade 389-ds-base-libsUpgrade 389-ds-base | Jul 3, 2018 | May 9, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade 389-ds-base-libsUpgrade 389-ds-base | Jul 3, 2018 | May 9, 2018 |
| Oracle_linux | — | Upgrade 389-ds-base-snmpUpgrade 389-ds-base-libsUpgrade 389-ds-baseUpgrade 389-ds-base-devel | May 10, 2018 | May 7, 2018 |
| Redhat_linux | — | Upgrade 389-ds-base-snmpUpgrade 389-ds-base-debuginfoUpgrade 389-ds-baseUpgrade 389-ds-base-develUpgrade 389-ds-base-libs | May 10, 2018 | May 9, 2018 |
| Suse | — | Upgrade 389-dsUpgrade lib389Upgrade 389-ds-develUpgrade libsvrcore0 | Feb 4, 2022 | May 9, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 9, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub