2018-04-30 14:29:00 2018-06-12 20:15:59

389-ds-base before version 1.3.6 is vulnerable to an improperly NULL terminated array in the uniqueness_entry_to_config() function in the "attribute uniqueness" plugin of 389 Directory Server. An authenticated, or possibly unauthenticated, attacker could use this flaw to force an out-of-bound heap memory read, possibly triggering a crash of the LDAP service.

Vector

NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

NONE

Integrity

NONE

Availability

PARTIAL
Fedoraproject 389 directory server 1.1.46 (not an official CPE) Fedora Project 389 Directory Server 1.2.1 Fedora Project 389 Directory Server 1.2.2 Fedora Project 389 Directory Server 1.2.3 Fedora Project 389 Directory Server 1.2.5 Fedora Project 389 Directory Server 1.2.5 Release Candidate 1 Fedora Project 389 Directory Server 1.2.5 Release Candidate 2 Fedora Project 389 Directory Server 1.2.5 Release Candidate 3 Fedora Project 389 Directory Server 1.2.5 Release Candidate 4 Fedora Project 389 Directory Server 1.2.6 Fedora Project 389 Directory Server 1.2.6 a2 Fedora Project 389 Directory Server 1.2.6 a3 Fedora Project 389 Directory Server 1.2.6 a4 Fedora Project 389 Directory Server 1.2.6 Release Candidate 1 Fedora Project 389 Directory Server 1.2.6 Release Candidate 2 Fedora Project 389 Directory Server 1.2.6 Release Candidate 3 Fedora Project 389 Directory Server 1.2.6 Release Candidate 6 Fedora Project 389 Directory Server 1.2.6 Release Candidate 7 Fedora Project 389 Directory Server 1.2.6.1 Fedora Project 389 Directory Server 1.2.7 Alpha 3 Fedora Project 389 Directory Server 1.2.7.5 Fedora Project 389 Directory Server 1.2.8 Alpha 1 Fedora Project 389 Directory Server 1.2.8 Alpha 2 Fedora Project 389 Directory Server 1.2.8 Alpha 3 Fedora Project 389 Directory Server 1.2.8 Release Candidate 1 Fedora Project 389 Directory Server 1.2.8 Release Candidate 2 Fedora Project 389 Directory Server 1.2.8.1 Fedora Project 389 Directory Server 1.2.8.2 Fedora Project 389 Directory Server 1.2.8.3 Fedora Project 389 Directory Server 1.2.9.9 Fedora Project 389 Directory Server 1.2.10 Fedora Project 389 Directory Server 1.2.10 alpha8 Fedora Project 389 Directory Server 1.2.10 release candidate 1 Fedora Project 389 Directory Server 1.2.10.2 Fedora Project 389 Directory Server 1.2.10.3 Fedora Project 389 Directory Server 1.2.10.4 Fedora Project 389 Directory Server 1.2.10.11 Fedora Project 389 Directory Server 1.2.11.1 Fedora Project 389 Directory Server 1.2.11.5 Fedora Project 389 Directory Server 1.2.11.6 Fedora Project 389 Directory Server 1.2.11.8 Fedora Project 389 Directory Server 1.2.11.9 Fedora Project 389 Directory Server 1.2.11.10 Fedora Project 389 Directory Server 1.2.11.11 Fedora Project 389 Directory Server 1.2.11.12 Fedora Project 389 Directory Server 1.2.11.13 Fedora Project 389 Directory Server 1.2.11.14 Fedora Project 389 Directory Server 1.2.11.15 Fedora Project 389 Directory Server 1.2.11.17 Fedora Project 389 Directory Server 1.2.11.19 Fedora Project 389 Directory Server 1.2.11.20 Fedora Project 389 Directory Server 1.2.11.21 Fedora Project 389 Directory Server 1.2.11.22 Fedora Project 389 Directory Server 1.2.11.23 Fedora Project 389 Directory Server 1.2.11.25 Fedora Project 389 Directory Server 1.2.11.26 Fedoraproject 389 directory server 1.2.16 (not an official CPE) Fedora Project 389 Directory Server 1.3.0.2 Fedora Project 389 Directory Server 1.3.0.3 Fedora Project 389 Directory Server 1.3.0.4 Fedora Project 389 Directory Server 1.3.0.5 Fedora Project 389 Directory Server 1.3.0.6 Fedora Project 389 Directory Server 1.3.0.7 Fedora Project 389 Directory Server 1.3.0.8 Fedora Project 389 Directory Server 1.3.1.0 Fedora Project 389 Directory Server 1.3.1.1 Fedora Project 389 Directory Server 1.3.1.2 Fedora Project 389 Directory Server 1.3.1.3 Fedora Project 389 Directory Server 1.3.1.4 Fedora Project 389 Directory Server 1.3.1.5 Fedora Project 389 Directory Server 1.3.1.6 Fedora Project 389 Directory Server 1.3.1.7 Fedora Project 389 Directory Server 1.3.1.8 Fedora Project 389 Directory Server 1.3.1.9 Fedora Project 389 Directory Server 1.3.1.10 Fedora Project 389 Directory Server 1.3.1.11 Fedora Project 389 Directory Server 1.3.1.12 Fedora Project 389 Directory Server 1.3.1.13 Fedora Project 389 Directory Server 1.3.1.14 Fedora Project 389 Directory Server 1.3.1.15 Fedora Project 389 Directory Server 1.3.1.16 Fedora Project 389 Directory Server 1.3.1.17 Fedora Project 389 Directory Server 1.3.1.18 Fedora Project 389 Directory Server 1.3.1.19 Fedora Project 389 Directory Server 1.3.1.22 Fedora Project 389 Directory Server 1.3.2.2 Fedora Project 389 Directory Server 1.3.2.3 Fedora Project 389 Directory Server 1.3.2.4 Fedora Project 389 Directory Server 1.3.2.5 Fedora Project 389 Directory Server 1.3.2.6 Fedora Project 389 Directory Server 1.3.2.7 Fedora Project 389 Directory Server 1.3.2.8 Fedora Project 389 Directory Server 1.3.2.9 Fedora Project 389 Directory Server 1.3.2.10 Fedora Project 389 Directory Server 1.3.2.11 Fedora Project 389 Directory Server 1.3.2.13 Fedora Project 389 Directory Server 1.3.2.16 Fedora Project 389 Directory Server 1.3.2.19 Fedora Project 389 Directory Server 1.3.2.22 Fedora Project 389 Directory Server 1.3.2.23 Fedora Project 389 Directory Server 1.3.2.24 Fedora Project 389 Directory Server 1.3.2.26 Fedoraproject 389 directory server 1.3.2.27 (not an official CPE) Fedora Project 389 Directory Server 1.3.3.0 Fedora Project 389 Directory Server 1.3.3.2 Fedora Project 389 Directory Server 1.3.3.3 Fedora Project 389 Directory Server 1.3.3.5 Fedora Project 389 Directory Server 1.3.3.8 Fedoraproject 389 directory server 1.3.3.9 (not an official CPE) Fedoraproject 389 directory server 1.3.3.10 (not an official CPE) Fedoraproject 389 directory server 1.3.3.11 (not an official CPE) Fedoraproject 389 directory server 1.3.3.12 (not an official CPE) Fedoraproject 389 directory server 1.3.3.13 (not an official CPE) Fedoraproject 389 directory server 1.3.3.14 (not an official CPE) Fedoraproject 389 directory server 1.3.4.0 (not an official CPE) Fedoraproject 389 directory server 1.3.4.1 (not an official CPE) Fedoraproject 389 directory server 1.3.4.4 (not an official CPE) Fedoraproject 389 directory server 1.3.4.5 (not an official CPE) Fedoraproject 389 directory server 1.3.4.8 (not an official CPE) Fedoraproject 389 directory server 1.3.4.9 (not an official CPE) Fedoraproject 389 directory server 1.3.4.14 (not an official CPE) Fedoraproject 389 directory server 1.3.5.2 (not an official CPE) Fedoraproject 389 directory server 1.3.5.3 (not an official CPE) Fedoraproject 389 directory server 1.3.5.4 (not an official CPE) Fedoraproject 389 directory server 1.3.5.13 (not an official CPE) Fedoraproject 389 directory server 1.3.5.14 (not an official CPE) Fedoraproject 389 directory server 1.3.5.15 (not an official CPE) Fedoraproject 389 directory server 1.3.5.16 (not an official CPE) Fedoraproject 389 directory server 1.3.5.17 (not an official CPE) Fedoraproject 389 directory server 1.3.5.18 (not an official CPE) Fedoraproject 389 directory server 1.3.5.19 (not an official CPE)