{ "schema_version": "1.4.0", "id": "GHSA-x8cw-gcmf-hx8h", "modified": "2022-05-14T01:01:39Z", "published": "2022-05-14T01:01:39Z", "aliases": [ "CVE-2018-10850" ], "details": "389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds-base handles persistent search, resulting in a crash if the server is under load. An anonymous attacker could use this flaw to trigger a denial of service.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10850" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2018:2757" }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10850" }, { "type": "WEB", "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00018.html" }, { "type": "WEB", "url": "https://pagure.io/389-ds-base/c/8f04487f99a" }, { "type": "WEB", "url": "https://pagure.io/389-ds-base/issue/49768" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00033.html" } ], "database_specific": { "cwe_ids": [ "CWE-362" ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2018-06-13T20:29:00Z" } }