CVE-2017-15135

It was found that 389-ds-base since 1.3.6.1 up to and including 1.4.0.3 did not always handle...

8.1 HighFix available

It was found that 389-ds-base since 1.3.6.1 up to and including 1.4.0.3 did not always handle internal hash comparison operations correctly during the authentication process. A remote, unauthenticated attacker could potentially use this flaw to bypass the authentication process under very rare and specific circumstances.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

3.83%Up 2.3 points since Apr 14, 2021

What each source reports

NVD Score used 8.1

Record: CVE-2017-15135
CVSS 3.0: 8.1 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:P/I:N/A:N
Weakness: CWE-287
Updated: 2026-11-02

CVE List No score

Record: CVE-2017-15135
Weakness: CWE-287
Updated: 2026-11-02

EUVDEUVD-2017-6595 No score

Record: EUVD-2017-6595
Updated: 2026-11-03

GitHub AdvisoriesGHSA-frrc-qvjw-hwj9 8.1

It was found that 389-ds-base since 1.3.6.1 up to and including 1.4.0.3 did not always handle...

Record: GHSA-frrc-qvjw-hwj9
CVSS 3.0: 8.1 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-287
Updated: 2026-11-02

OSV 8.1

Record: CVE-2017-15135
CVSS 3.0: 8.1 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2017-15135 8.1

Record: DEBIAN-CVE-2017-15135
CVSS 3.0: 8.1 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 7 moreShow less

OSVRHSA-2018:0414 7.5

Red Hat Security Advisory: 389-ds-base security and bug fix update

Record: RHSA-2018:0414
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2018:0515 7.5

Red Hat Security Advisory: 389-ds-base security update

Record: RHSA-2018:0515
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2017-15135 8.1

Record: UBUNTU-CVE-2017-15135
CVSS 3.0: 8.1 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVMGASA-2018-0193 No score

Updated 389-ds-base packages fix security vulnerability

It was discovered that a lack of size check in slapi_ct_memcmp() function may lead to authentication bypass through pre-hashed userPassword attributes under highly specific circumstances (CVE-2017-15135).

Record: MGASA-2018-0193
Updated: 2026-11-02

OSVopenSUSE-SU-2019:1397-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

The following security vulnerabilities were addressed:

CVE-2018-10850: Fixed a race condition on reference counter that would lead to a denial of service using persistent search (bsc#1096368)
CVE-2017-15134: Fixed a remote denial of service via search filters in slapi_filter_sprintf in slapd/util.c (bsc#1076530)
CVE-2017-15135: Fixed authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c (bsc#1076530)
CVE-2018-10935: Fixed an issue that allowed users to cause a crash via ldapsearch with server side sorts (bsc#1105606)
CVE-2018-14624: The lock controlling the error log was not correctly used when re-opening the log file in log__error_emergency(), allowing an attacker to send a flood of modifications to a very large DN, which could have caused slapd to crash (bsc#1106699).

This update was imported from the SUSE:SLE-15:Update update project.

Record: openSUSE-SU-2019:1397-1
Updated: 2026-11-02

OSVSUSE-SU-2019:1207-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

The following security vulnerabilities were addressed:

CVE-2018-10850: Fixed a race condition on reference counter that would lead to a denial of service using persistent search (bsc#1096368)
CVE-2017-15134: Fixed a remote denial of service via search filters in slapi_filter_sprintf in slapd/util.c (bsc#1076530)
CVE-2017-15135: Fixed authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c (bsc#1076530)
CVE-2018-10935: Fixed an issue that allowed users to cause a crash via ldapsearch with server side sorts (bsc#1105606)
CVE-2018-14624: The lock controlling the error log was not correctly used when re-opening the log file in log__error_emergency(), allowing an attacker to send a flood of modifications to a very large DN, which could have caused slapd to crash (bsc#1106699).

Record: SUSE-SU-2019:1207-1
Updated: 2026-11-02

OSVSUSE-SU-2019:1207-2 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

The following security vulnerabilities were addressed:

CVE-2018-10850: Fixed a race condition on reference counter that would lead to a denial of service using persistent search (bsc#1096368)
CVE-2017-15134: Fixed a remote denial of service via search filters in slapi_filter_sprintf in slapd/util.c (bsc#1076530)
CVE-2017-15135: Fixed authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c (bsc#1076530)
CVE-2018-10935: Fixed an issue that allowed users to cause a crash via ldapsearch with server side sorts (bsc#1105606)
CVE-2018-14624: The lock controlling the error log was not correctly used when re-opening the log file in log__error_emergency(), allowing an attacker to send a flood of modifications to a very large DN, which could have caused slapd to crash (bsc#1106699).

Record: SUSE-SU-2019:1207-2
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`389-ds-base` Debian:12	before 1.3.7.9-1	1.3.7.9-1
`389-ds-base` Debian:13	before 1.3.7.9-1	1.3.7.9-1
`389-ds-base` Mageia:6	before 1.3.5.17-1.4.mga6	1.3.5.17-1.4.mga6
`389-ds-base` Red Hat:enterprise_linux:7::client From an advisory covering 2 CVEs	before 0:1.3.6.1-28.el7_4	0:1.3.6.1-28.el7_4
`389-ds-base-debuginfo` Red Hat:enterprise_linux:7::client From an advisory covering 2 CVEs	before 0:1.3.6.1-28.el7_4	0:1.3.6.1-28.el7_4
`389-ds-base-devel` Red Hat:enterprise_linux:7::client From an advisory covering 2 CVEs	before 0:1.3.6.1-28.el7_4	0:1.3.6.1-28.el7_4
`389-ds-base-libs` Red Hat:enterprise_linux:7::client From an advisory covering 2 CVEs	before 0:1.3.6.1-28.el7_4	0:1.3.6.1-28.el7_4
`389-ds-base-snmp` Red Hat:enterprise_linux:7::client From an advisory covering 2 CVEs	before 0:1.3.6.1-28.el7_4	0:1.3.6.1-28.el7_4
`389-ds-base` Red Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs	before 0:1.3.6.1-28.el7_4	0:1.3.6.1-28.el7_4
`389-ds-base-debuginfo` Red Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs	before 0:1.3.6.1-28.el7_4	0:1.3.6.1-28.el7_4

Show 32 moreShow less

Affected packages
Package	Affected	Fixed
`389-ds-base-devel` Red Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs	before 0:1.3.6.1-28.el7_4	0:1.3.6.1-28.el7_4
`389-ds-base-libs` Red Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs	before 0:1.3.6.1-28.el7_4	0:1.3.6.1-28.el7_4
`389-ds-base-snmp` Red Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs	before 0:1.3.6.1-28.el7_4	0:1.3.6.1-28.el7_4
`389-ds-base` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 0:1.3.6.1-28.el7_4	0:1.3.6.1-28.el7_4
`389-ds-base-debuginfo` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 0:1.3.6.1-28.el7_4	0:1.3.6.1-28.el7_4
`389-ds-base-libs` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 0:1.3.6.1-28.el7_4	0:1.3.6.1-28.el7_4
`389-ds-base-devel` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 0:1.3.6.1-28.el7_4	0:1.3.6.1-28.el7_4
`389-ds-base-snmp` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 0:1.3.6.1-28.el7_4	0:1.3.6.1-28.el7_4
`389-ds-base` Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs	before 0:1.3.6.1-28.el7_4	0:1.3.6.1-28.el7_4
`389-ds-base-debuginfo` Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs	before 0:1.3.6.1-28.el7_4	0:1.3.6.1-28.el7_4
`389-ds-base-libs` Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs	before 0:1.3.6.1-28.el7_4	0:1.3.6.1-28.el7_4
`389-ds-base-devel` Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs	before 0:1.3.6.1-28.el7_4	0:1.3.6.1-28.el7_4
`389-ds-base-snmp` Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs	before 0:1.3.6.1-28.el7_4	0:1.3.6.1-28.el7_4
`389-ds-base` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 0:1.2.11.15-94.el6_9	0:1.2.11.15-94.el6_9
`389-ds-base-debuginfo` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 0:1.2.11.15-94.el6_9	0:1.2.11.15-94.el6_9
`389-ds-base-devel` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 0:1.2.11.15-94.el6_9	0:1.2.11.15-94.el6_9
`389-ds-base-libs` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 0:1.2.11.15-94.el6_9	0:1.2.11.15-94.el6_9
`389-ds-base` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 0:1.2.11.15-94.el6_9	0:1.2.11.15-94.el6_9
`389-ds-base-debuginfo` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 0:1.2.11.15-94.el6_9	0:1.2.11.15-94.el6_9
`389-ds-base-devel` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 0:1.2.11.15-94.el6_9	0:1.2.11.15-94.el6_9
`389-ds-base-libs` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 0:1.2.11.15-94.el6_9	0:1.2.11.15-94.el6_9
`389-ds-base` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 0:1.2.11.15-94.el6_9	0:1.2.11.15-94.el6_9
`389-ds-base-debuginfo` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 0:1.2.11.15-94.el6_9	0:1.2.11.15-94.el6_9
`389-ds-base-libs` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 0:1.2.11.15-94.el6_9	0:1.2.11.15-94.el6_9
`389-ds-base-devel` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 0:1.2.11.15-94.el6_9	0:1.2.11.15-94.el6_9
`389-ds-base` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 0:1.2.11.15-94.el6_9	0:1.2.11.15-94.el6_9
`389-ds-base-debuginfo` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 0:1.2.11.15-94.el6_9	0:1.2.11.15-94.el6_9
`389-ds-base-libs` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 0:1.2.11.15-94.el6_9	0:1.2.11.15-94.el6_9
`389-ds-base-devel` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 0:1.2.11.15-94.el6_9	0:1.2.11.15-94.el6_9
`389-ds` SUSE:Linux Enterprise Module for Server Applications 15 From an advisory covering 5 CVEs	before 1.4.0.3-4.7.52	1.4.0.3-4.7.52
`389-ds` SUSE:Linux Enterprise Module for Server Applications 15 SP1 From an advisory covering 5 CVEs	before 1.4.0.3-4.7.52	1.4.0.3-4.7.52
`389-ds` openSUSE:Leap 15.0 From an advisory covering 5 CVEs	before 1.4.0.3-lp150.3.3.1	1.4.0.3-lp150.3.3.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	affected
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-15135 is a high vulnerability (CVSS 8.1) in Red Hat, Inc. 389-ds-base, published January 24, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.83%, the 90th percentile. Fixed in 389-ds-base 1.3.7.9-1.

References

Show 29 moreShow less