PT-2019-2576 · Red Hat · 389-Ds-Base+1

Cedric Buissart · Publicado 2019-06-19 · Atualizado 2022-11-30 · CVE-2019-10171

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions 389-ds-base versions 1.4.0.x before 1.4.0.17 Red Hat Enterprise Linux 7.5

Description The issue is related to excessive CPU consumption, which can lead to a denial of service. An attacker can provoke this condition, causing the system to become unresponsive. The problem is associated with an incorrectly applied fix in Red Hat Enterprise Linux 7.5.

Recommendations For 389-ds-base versions 1.4.0.x before 1.4.0.17, update to version 1.4.0.17 or later to resolve the issue. For Red Hat Enterprise Linux 7.5, apply the correct fix for the excessive CPU consumption issue to prevent denial of service attacks.

Correção

Allocation of Resources Without Limits

Resource Exhaustion

Enumeração de Fraquezas

CWE-770

CWE-400

Identificadores relacionados

BDU:2019-02449

CVE-2019-10171

RHSA-2019:1789

Produtos afetados

389-Ds-Base

Red Hat

Referências · 7

• https://bdu.fstec.ru/vul/2019-02449 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2019-10171 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10171 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-10171 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=1722081 · Nota
• https://access.redhat.com/security/cve/cve-2019-10171 · Nota
• https://osv.dev/vulnerability/CVE-2019-10171 · Aviso do Fabricante