Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jjqx-m459-2x33

Опубликовано: 09 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

A flaw was found in 389 Directory Server. The SMD5 password storage plugin performs unsigned integer underflow when computing salt length from a crafted password hash shorter than 16 bytes, causing a buffer over-read that crashes the LDAP server during authentication.

A flaw was found in 389 Directory Server. The SMD5 password storage plugin performs unsigned integer underflow when computing salt length from a crafted password hash shorter than 16 bytes, causing a buffer over-read that crashes the LDAP server during authentication.

EPSS

Процентиль: 21%
0.00282
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-191

Связанные уязвимости

CVSS3: 4.9
ubuntu
2 месяца назад

A flaw was found in 389 Directory Server. The SMD5 password storage plugin performs unsigned integer underflow when computing salt length from a crafted password hash shorter than 16 bytes, causing a buffer over-read that crashes the LDAP server during authentication.

CVSS3: 4.9
redhat
4 месяца назад

A flaw was found in 389 Directory Server. The SMD5 password storage plugin performs unsigned integer underflow when computing salt length from a crafted password hash shorter than 16 bytes, causing a buffer over-read that crashes the LDAP server during authentication.

CVSS3: 4.9
nvd
2 месяца назад

A flaw was found in 389 Directory Server. The SMD5 password storage plugin performs unsigned integer underflow when computing salt length from a crafted password hash shorter than 16 bytes, causing a buffer over-read that crashes the LDAP server during authentication.

CVSS3: 4.9
debian
2 месяца назад

A flaw was found in 389 Directory Server. The SMD5 password storage pl ...

suse-cvrf
30 дней назад

Security update for 389-ds

EPSS

Процентиль: 21%
0.00282
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-191