Denial Of Service (DoS)

2022-11-1000:44:40

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

denial of service

389-ds-base

vulnerability

content synchronization

null pointer dereference

maliciously crafted query

application crash

0.001 Low

EPSS

Percentile

42.7%

JSON

389-ds-base is vulnerable to denial of service. The vulnerability exists when the content synchronization plugin is enabled, allowing an attacker crash the application through the null pointer dereference by providing a maliciously crafted query

CPENameOperatorVersion
389-ds-baseeq1.3.10.2__13.el7_9
389-ds-baseeq1.2.11.15__85.el6_8
389-ds-baseeq1.3.7.5__19.el7_5
389-ds-baseeq1.3.10.2__8.el7_9
389-ds-baseeq1.2.11.15__12.el6_4
389-ds-baseeq1.3.10.1__5.el7
389-ds-baseeq1.2.11.15__91.el6_9
389-ds-baseeq1.2.11.15__60.el6
389-ds-baseeq1.2.11.15__72.el6_7
389-ds-baseeq1.3.9.1__10.el7

Name	Operator	Version
389-ds-base	eq	1.3.10.2__13.el7_9
389-ds-base	eq	1.2.11.15__85.el6_8
389-ds-base	eq	1.3.7.5__19.el7_5
389-ds-base	eq	1.3.10.2__8.el7_9
389-ds-base	eq	1.2.11.15__12.el6_4
389-ds-base	eq	1.3.10.1__5.el7
389-ds-base	eq	1.2.11.15__91.el6_9
389-ds-base	eq	1.2.11.15__60.el6
389-ds-base	eq	1.2.11.15__72.el6_7
389-ds-base	eq	1.3.9.1__10.el7