CVE-2019-10171: High severity red hat 389 directory server vulnerability
It was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17, was incorrectly applied in RHEL 7.5. An attacker would still be able to provoke excessive CPU consumption leading to a denial of service.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-10171?
CVE-2019-10171 has a medium severity level due to its potential to cause denial of service through excessive CPU consumption.
How do I fix CVE-2019-10171?
To fix CVE-2019-10171, upgrade 389-ds-base to version 1.4.0.17 or later on affected systems.
What systems are affected by CVE-2019-10171?
CVE-2019-10171 affects Red Hat Enterprise Linux Server EUS version 7.5 and 389 Directory Server versions before 1.4.0.17.
Can CVE-2019-10171 result in a denial of service?
Yes, an attacker can exploit CVE-2019-10171 to cause excessive CPU consumption leading to a denial of service condition.
Was CVE-2019-10171 a result of a previous vulnerability?
Yes, CVE-2019-10171 stems from a fix for CVE-2018-14648 that was incorrectly applied in certain versions.