CVE-2011-0019 Denial of service in n/a

High 7.5 Published 23 Feb 2011 Updated 6 Aug 2024

Remote attackers can crash the 389 Directory Server daemon via multiple search requests, causing a denial of service.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2011-0019?

CVE-2011-0019 is a high-severity denial of service vulnerability in n/a, published on 23 Feb 2011. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

slapd (aka ns-slapd) in 389 Directory Server 1.2.7.5 (aka Red Hat Directory Server 8.2.x or dirsrv) does not properly handle simple paged result searches, which allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via multiple search requests.

Weakness: CWE-20

Which versions are affected by CVE-2011-0019?

It affects 2 products.

Products include Fedoraproject 389 Directory Server, Redhat Directory Server.

How do I fix CVE-2011-0019?

Apply the vendor's patch.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2011-0019 being exploited?

There is no known exploitation of CVE-2011-0019 in the wild and no public exploit code.

Sources

Also known as GHSA-rxmx-rf7q-7wh5.