PT-2019-2576 · Red Hat · 389-Ds-Base+1

Cedric Buissart · Published 2019-06-19 · Updated 2022-11-30 · CVE-2019-10171

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions 389-ds-base versions 1.4.0.x before 1.4.0.17 Red Hat Enterprise Linux 7.5

Description The issue is related to excessive CPU consumption, which can lead to a denial of service. An attacker can provoke this condition, causing the system to become unresponsive. The problem is associated with an incorrectly applied fix in Red Hat Enterprise Linux 7.5.

Recommendations For 389-ds-base versions 1.4.0.x before 1.4.0.17, update to version 1.4.0.17 or later to resolve the issue. For Red Hat Enterprise Linux 7.5, apply the correct fix for the excessive CPU consumption issue to prevent denial of service attacks.

Fix

Allocation of Resources Without Limits

Resource Exhaustion

Weakness Enumeration

CWE-770

CWE-400

Related Identifiers

BDU:2019-02449

CVE-2019-10171

RHSA-2019:1789

Affected Products

389-Ds-Base

Red Hat

References · 7

• https://bdu.fstec.ru/vul/2019-02449 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2019-10171 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-10171 · Security Note
• https://osv.dev/vulnerability/CVE-2019-10171 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10171 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1722081 · Note
• https://access.redhat.com/security/cve/cve-2019-10171 · Note