CVE-2019-10171

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-08-02 · updated 2026-06-17
Weakness: CWE-770

Description

It was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17, was incorrectly applied in RHEL 7.5. An attacker would still be able to provoke excessive CPU consumption leading to a denial of service.

Affected products

Red Hat, Inc. 389-ds-base: from 1.4.0.0 before 1.4.0.17 — fixed in 1.4.0.17
RedHat Enterprise Linux Server Eus: 7.5

How to fix

Upgrade to a fixed version: Red Hat, Inc. 389-ds-base 1.4.0.17. Check the vendor advisory for mitigations.

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10171
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10171

Get alerted when CVE-2019-10171 or the next vulnerability affects your stack