CVE-2018-1089

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search filters with characters needing escapes, possibly leading to buffer overflows. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-122 CWE-119

Affected software

Vendor	Product	Versions
unspecified	389-ds-base	389-ds-base 1.4.0.9; 389-ds-base 1.3.8.1; 389-ds-base 1.3.6.15

References

http://www.securityfocus.com/bid/104137Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2018:1364Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1380Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1089Issue Tracking, Patch
https://lists.debian.org/debian-lts-announce/2018/07/msg00018.htmlMailing List, Third Party Advisory
http://www.securityfocus.com/bid/104137Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2018:1364Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1380Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1089Issue Tracking, Patch
https://lists.debian.org/debian-lts-announce/2018/07/msg00018.htmlMailing List, Third Party Advisory

Timeline

Published: May 9, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-108905.3A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. It was possible for the core_course_get_categories web service to re CVE-2018-108917.3A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. When a quiz question bank is imported, it was possible for the quest CVE-2018-108925.3The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi pathnames. The flaw allo CVE-2018-108938.8Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames. A malicious server CVE-2018-108945.4It was found that SAML authentication in Keycloak 3.4.3.Final incorrectly authenticated expired certificates. A malicious user could use thi CVE-2018-108958.8qutebrowser before version 1.4.1 is vulnerable to a cross-site request forgery flaw that allows websites to access 'qute://*' URLs. A malici CVE-2018-108967.1The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0", disabling cloud-init's deletion of ssh ho CVE-2018-108978.1A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configur CVE-2018-108988.8A vulnerability was found in openstack-tripleo-heat-templates before version 8.0.2-40. When deployed using Director using default configurat CVE-2018-108998.8A flaw was found in Jolokia versions from 1.2 to before 1.6.1. Affected versions are vulnerable to a system-wide CSRF. This holds true for p CVE-2018-10907.5In Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and then become readable to all users with rea CVE-2018-109007.8Network Manager VPNC plugin (aka networkmanager-vpnc) before version 1.2.6 is vulnerable to a privilege escalation attack. A new line charac