CVE:CVE-2018-14624
CNNVD:CNNVD-201809-328
389-ds-base是一个高度可用、功能齐全、可靠且安全的 LDAP 服务器实现。它处理世界上许多最大的 LDAP 部署。
389-ds-base 1.3.7.10版本, 1.3.8.8版本和1.4.0.16版本存在输入验证错误漏洞，该漏洞源于在重新打开日志文件时，未正确使用控制错误日志的锁。攻击者利用该漏洞可以导致拒绝服务。
solution:Upgrade fedoraproject 389_directory_server to a higher version than 1.3.7.10,1.3.8.8,1.4.0.16,and avoid the version (,1.3.7.10],[1.3.8.0,1.3.8.8],[1.4.0.0,1.4.0.16]; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.5,7.6,and avoid the version 7.5,7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0