fedoraproject 389-directory-server CVE-2018-10850 vulnerability in Fedora Project and Other Products
Published on June 13, 2018

product logo product logo product logo
389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds-base handles persistent search, resulting in a crash if the server is under load. An anonymous attacker could use this flaw to trigger a denial of service.

Vendor Advisory Vendor Advisory NVD

Weakness Type

What is a Race Condition Vulnerability?

The program contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

CVE-2018-10850 has been classified to as a Race Condition vulnerability or weakness.


Products Associated with CVE-2018-10850

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2018-10850 are published in these products:

 
 
 
 
 
 
 
 
 

Affected Versions

[UNKNOWN] 389-ds-base:

Exploit Probability

EPSS
2.05%
Percentile
83.67%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.