Description
It was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17, was incorrectly applied in RHEL 7.5. An attacker would still be able to provoke excessive CPU consumption leading to a denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| RedHat | 389-ds-base | 1.4.0.x before 1.4.0.17 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7.5 EUS | 389-ds-base +3 | 1.3.7.5-30.el7_5 | RHSA-2019:1789 |
Advisories 1
- RHSA-2019:1789 Red Hat Security Advisory: 389-ds-base security update Red Hat Security Advisories (RHSA) · Jun 26, 2026