CVE-2018-14648 Denial of service in 389-ds-base:
An unauthenticated attacker can cause excessive CPU consumption and denial of service in 389 Directory Server via a crafted search query.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-14648?
CVE-2018-14648 is a high-severity denial of service vulnerability in Debian Debian Linux, published on 28 Sep 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A flaw was found in 389 Directory Server. A specially crafted search query could lead to excessive CPU consumption in the do_search() function. An unauthenticated attacker could use this flaw to provoke a denial of service.
Weakness: CWE-400
Which versions are affected by CVE-2018-14648?
It affects 3 products.
Linux distribution packages (30)
389-ds-base Red Hat:enterprise_linux:7::client | All versions | 0:1.3.8.4-15.el7 |
389-ds-base-debuginfo Red Hat:enterprise_linux:7::client | All versions | 0:1.3.8.4-15.el7 |
389-ds-base-devel Red Hat:enterprise_linux:7::client | All versions | 0:1.3.8.4-15.el7 |
389-ds-base-libs Red Hat:enterprise_linux:7::client | All versions | 0:1.3.8.4-15.el7 |
389-ds-base-snmp Red Hat:enterprise_linux:7::client | All versions | 0:1.3.8.4-15.el7 |
389-ds-base Red Hat:enterprise_linux:7::computenode | All versions | 0:1.3.8.4-15.el7 |
389-ds-base-debuginfo Red Hat:enterprise_linux:7::computenode | All versions | 0:1.3.8.4-15.el7 |
389-ds-base-devel Red Hat:enterprise_linux:7::computenode | All versions | 0:1.3.8.4-15.el7 |
389-ds-base-libs Red Hat:enterprise_linux:7::computenode | All versions | 0:1.3.8.4-15.el7 |
389-ds-base-snmp Red Hat:enterprise_linux:7::computenode | All versions | 0:1.3.8.4-15.el7 |
389-ds-base Red Hat:enterprise_linux:7::server | All versions | 0:1.3.8.4-15.el7 |
389-ds-base-debuginfo Red Hat:enterprise_linux:7::server | All versions | 0:1.3.8.4-15.el7 |
389-ds-base-devel Red Hat:enterprise_linux:7::server | All versions | 0:1.3.8.4-15.el7 |
389-ds-base-libs Red Hat:enterprise_linux:7::server | All versions | 0:1.3.8.4-15.el7 |
389-ds-base-snmp Red Hat:enterprise_linux:7::server | All versions | 0:1.3.8.4-15.el7 |
389-ds-base Red Hat:enterprise_linux:7::workstation | All versions | 0:1.3.8.4-15.el7 |
389-ds-base-debuginfo Red Hat:enterprise_linux:7::workstation | All versions | 0:1.3.8.4-15.el7 |
389-ds-base-devel Red Hat:enterprise_linux:7::workstation | All versions | 0:1.3.8.4-15.el7 |
389-ds-base-libs Red Hat:enterprise_linux:7::workstation | All versions | 0:1.3.8.4-15.el7 |
389-ds-base-snmp Red Hat:enterprise_linux:7::workstation | All versions | 0:1.3.8.4-15.el7 |
389-ds-base Red Hat:rhel_eus:7.5::computenode | All versions | 0:1.3.7.5-29.el7_5 |
389-ds-base-debuginfo Red Hat:rhel_eus:7.5::computenode | All versions | 0:1.3.7.5-29.el7_5 |
389-ds-base-devel Red Hat:rhel_eus:7.5::computenode | All versions | 0:1.3.7.5-29.el7_5 |
389-ds-base-libs Red Hat:rhel_eus:7.5::computenode | All versions | 0:1.3.7.5-29.el7_5 |
389-ds-base-snmp Red Hat:rhel_eus:7.5::computenode | All versions | 0:1.3.7.5-29.el7_5 |
389-ds-base Red Hat:rhel_eus:7.5::server | All versions | 0:1.3.7.5-29.el7_5 |
389-ds-base-debuginfo Red Hat:rhel_eus:7.5::server | All versions | 0:1.3.7.5-29.el7_5 |
389-ds-base-devel Red Hat:rhel_eus:7.5::server | All versions | 0:1.3.7.5-29.el7_5 |
389-ds-base-libs Red Hat:rhel_eus:7.5::server | All versions | 0:1.3.7.5-29.el7_5 |
389-ds-base-snmp Red Hat:rhel_eus:7.5::server | All versions | 0:1.3.7.5-29.el7_5 |
Products include Debian Debian Linux, Fedoraproject 389 Directory Server, Redhat Enterprise Linux.
How do I fix CVE-2018-14648?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2018-14648 being exploited?
There is no known exploitation of CVE-2018-14648 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as DEBIAN-CVE-2018-14648, DLA-1554-1, GHSA-pghh-mx5f-3vcv, MGASA-2018-0461, RHSA-2018:3127, RHSA-2018:3507 and 1 more.