CVE-2018-14624
CVE-2018-14624
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 7.5EPSS 2.5%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Ciclo de vida
06 sep 2018Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16. The lock controlling the error log was not correctly used when re-opening the log file in log__error_emergency(). An attacker could send a flood of modifications to a very large DN, which would cause slapd to crash.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Productos afectados
[UNKNOWN] · 389-ds-base¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →