Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5cpf-527w-96rp

Опубликовано: 09 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password storage plugin does not enforce an upper bound on the iteration count extracted from stored password hashes. A privileged attacker who can modify a user's password hash can cause excessive CPU consumption during authentication, resulting in denial of service.

A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password storage plugin does not enforce an upper bound on the iteration count extracted from stored password hashes. A privileged attacker who can modify a user's password hash can cause excessive CPU consumption during authentication, resulting in denial of service.

EPSS

Процентиль: 22%
0.00291
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 4.9
ubuntu
2 месяца назад

A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password storage plugin does not enforce an upper bound on the iteration count extracted from stored password hashes. A privileged attacker who can modify a user's password hash can cause excessive CPU consumption during authentication, resulting in denial of service.

CVSS3: 4.9
redhat
4 месяца назад

A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password storage plugin does not enforce an upper bound on the iteration count extracted from stored password hashes. A privileged attacker who can modify a user's password hash can cause excessive CPU consumption during authentication, resulting in denial of service.

CVSS3: 4.9
nvd
2 месяца назад

A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password storage plugin does not enforce an upper bound on the iteration count extracted from stored password hashes. A privileged attacker who can modify a user's password hash can cause excessive CPU consumption during authentication, resulting in denial of service.

CVSS3: 4.9
debian
2 месяца назад

A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password s ...

suse-cvrf
30 дней назад

Security update for 389-ds

EPSS

Процентиль: 22%
0.00291
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-400