Vulnerabilities > Fedoraproject > 389 Directory Server > 1.4.0.12

DATE CVE VULNERABILITY TITLE RISK
2019-11-25 CVE-2019-10224 Information Exposure vulnerability in Fedoraproject 389 Directory Server
A flaw has been found in 389-ds-base versions 1.4.x.x before 1.4.1.3.
low complexity
fedoraproject CWE-200
4.6
2019-08-02 CVE-2019-10171 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
It was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17, was incorrectly applied in RHEL 7.5.
network
low complexity
fedoraproject redhat CWE-770
7.5
2019-04-17 CVE-2019-3883 Missing Release of Resource after Effective Lifetime vulnerability in multiple products
In 389-ds-base up to version 1.4.1.2, requests are handled by workers threads.
network
low complexity
fedoraproject debian redhat CWE-772
7.5
2018-09-28 CVE-2018-14648 Resource Exhaustion vulnerability in multiple products
A flaw was found in 389 Directory Server.
network
low complexity
fedoraproject debian redhat CWE-400
7.8
2018-09-06 CVE-2018-14624 Improper Input Validation vulnerability in multiple products
A vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16.
network
low complexity
fedoraproject redhat debian CWE-20
7.5