CVE-2018-1089

389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search...

7.5 HighFix available

389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search filters with characters needing escapes, possibly leading to buffer overflows. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

4.01%Up 2.1 points since Apr 14, 2021

What each source reports

CVE List Score used 7.5

Record: CVE-2018-1089
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-122
Updated: 2026-11-02

EUVDEUVD-2018-11739 7.5

Record: EUVD-2018-11739
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-03

GitHub AdvisoriesGHSA-4xv3-w7vq-3g6v 7.5

389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search...

Record: GHSA-4xv3-w7vq-3g6v
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-119
Updated: 2026-11-02

NVD 7.5

Record: CVE-2018-1089
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-122, CWE-119
Updated: 2026-11-02

OSV 7.5

Record: CVE-2018-1089
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2018-1089 7.5

Record: DEBIAN-CVE-2018-1089
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 6 moreShow less

OSVRHSA-2018:1364 7.5

Red Hat Security Advisory: 389-ds-base security update

Record: RHSA-2018:1364
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2018:1380 7.5

Red Hat Security Advisory: 389-ds-base security and bug fix update

Record: RHSA-2018:1380
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2018-1089 7.5

Record: UBUNTU-CVE-2018-1089
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVMGASA-2018-0245 No score

Updated 389-ds-base packages fix security vulnerability

389-ds-base did not properly handle characters needed to be escaped in its query filter. This could result in buffer overflows, from the heap or the stack, on larger filters. An unauthenticated attacker could send a specially crafted LDAP request and crash the server (CVE-2018-1089).

Record: MGASA-2018-0245
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10593-1 No score

389-ds-2.0.10~git0.21dd2802c-1.1 on GA media

These are all security issues fixed in the 389-ds-2.0.10~git0.21dd2802c-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10593-1
Updated: 2026-11-02

OSVSUSE-SU-2019:2155-1 No score

Security update for 389-ds

This update for 389-ds to version 1.4.0.26 fixes the following issues:

Security issues fixed:

CVE-2016-5416: Fixed an information disclosure where a anonymous user could read the default ACI (bsc#991201).
CVE-2018-1054: Fixed a denial of service via search filters in SetUnicodeStringFromUTF_8() (bsc#1083689).
CVE-2018-1089: Fixed a buffer overflow via large filter value (bsc#1092187).
CVE-2018-10871: Fixed an information disclosure in certain plugins leading to the disclosure of plaintext password to an privileged attackers (bsc#1099465).
CVE-2018-14638: Fixed a denial of service through a crash in delete_passwdPolicy () (bsc#1108674).
CVE-2018-14648: Fixed a denial of service caused by malformed values in search queries (bsc#1109609).
CVE-2018-10935: Fixed a denial of service related to ldapsearch with server side sort (bsc#1105606).
CVE-2019-3883: Fixed a denial of service caused by hanging LDAP requests over TLS (bsc#1132385).

Record: SUSE-SU-2019:2155-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`389-ds-base` Debian:12	before 1.3.8.2-1	1.3.8.2-1
`389-ds-base` Debian:13	before 1.3.8.2-1	1.3.8.2-1
`389-ds-base` Debian:8 From an advisory covering 5 CVEs	before 1.3.3.5-4+deb8u1, plus listed versions 1.3.3.5-4	1.3.3.5-4+deb8u1
`389-ds-base` Mageia:6	before 1.3.5.17-1.5.mga6	1.3.5.17-1.5.mga6
`389-ds-base` Red Hat:enterprise_linux:6::client	before 0:1.2.11.15-95.el6_9	0:1.2.11.15-95.el6_9
`389-ds-base-debuginfo` Red Hat:enterprise_linux:6::client	before 0:1.2.11.15-95.el6_9	0:1.2.11.15-95.el6_9
`389-ds-base-devel` Red Hat:enterprise_linux:6::client	before 0:1.2.11.15-95.el6_9	0:1.2.11.15-95.el6_9
`389-ds-base-libs` Red Hat:enterprise_linux:6::client	before 0:1.2.11.15-95.el6_9	0:1.2.11.15-95.el6_9
`389-ds-base` Red Hat:enterprise_linux:6::computenode	before 0:1.2.11.15-95.el6_9	0:1.2.11.15-95.el6_9
`389-ds-base-debuginfo` Red Hat:enterprise_linux:6::computenode	before 0:1.2.11.15-95.el6_9	0:1.2.11.15-95.el6_9

Show 36 moreShow less

Affected packages
Package	Affected	Fixed
`389-ds-base-devel` Red Hat:enterprise_linux:6::computenode	before 0:1.2.11.15-95.el6_9	0:1.2.11.15-95.el6_9
`389-ds-base-libs` Red Hat:enterprise_linux:6::computenode	before 0:1.2.11.15-95.el6_9	0:1.2.11.15-95.el6_9
`389-ds-base` Red Hat:enterprise_linux:6::server	before 0:1.2.11.15-95.el6_9	0:1.2.11.15-95.el6_9
`389-ds-base-debuginfo` Red Hat:enterprise_linux:6::server	before 0:1.2.11.15-95.el6_9	0:1.2.11.15-95.el6_9
`389-ds-base-libs` Red Hat:enterprise_linux:6::server	before 0:1.2.11.15-95.el6_9	0:1.2.11.15-95.el6_9
`389-ds-base-devel` Red Hat:enterprise_linux:6::server	before 0:1.2.11.15-95.el6_9	0:1.2.11.15-95.el6_9
`389-ds-base` Red Hat:enterprise_linux:6::workstation	before 0:1.2.11.15-95.el6_9	0:1.2.11.15-95.el6_9
`389-ds-base-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:1.2.11.15-95.el6_9	0:1.2.11.15-95.el6_9
`389-ds-base-libs` Red Hat:enterprise_linux:6::workstation	before 0:1.2.11.15-95.el6_9	0:1.2.11.15-95.el6_9
`389-ds-base-devel` Red Hat:enterprise_linux:6::workstation	before 0:1.2.11.15-95.el6_9	0:1.2.11.15-95.el6_9
`389-ds-base` Red Hat:enterprise_linux:7::client	before 0:1.3.7.5-21.el7_5	0:1.3.7.5-21.el7_5
`389-ds-base-debuginfo` Red Hat:enterprise_linux:7::client	before 0:1.3.7.5-21.el7_5	0:1.3.7.5-21.el7_5
`389-ds-base-devel` Red Hat:enterprise_linux:7::client	before 0:1.3.7.5-21.el7_5	0:1.3.7.5-21.el7_5
`389-ds-base-libs` Red Hat:enterprise_linux:7::client	before 0:1.3.7.5-21.el7_5	0:1.3.7.5-21.el7_5
`389-ds-base-snmp` Red Hat:enterprise_linux:7::client	before 0:1.3.7.5-21.el7_5	0:1.3.7.5-21.el7_5
`389-ds-base` Red Hat:enterprise_linux:7::computenode	before 0:1.3.7.5-21.el7_5	0:1.3.7.5-21.el7_5
`389-ds-base-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.3.7.5-21.el7_5	0:1.3.7.5-21.el7_5
`389-ds-base-devel` Red Hat:enterprise_linux:7::computenode	before 0:1.3.7.5-21.el7_5	0:1.3.7.5-21.el7_5
`389-ds-base-libs` Red Hat:enterprise_linux:7::computenode	before 0:1.3.7.5-21.el7_5	0:1.3.7.5-21.el7_5
`389-ds-base-snmp` Red Hat:enterprise_linux:7::computenode	before 0:1.3.7.5-21.el7_5	0:1.3.7.5-21.el7_5
`389-ds-base` Red Hat:enterprise_linux:7::server	before 0:1.3.7.5-21.el7_5	0:1.3.7.5-21.el7_5
`389-ds-base-debuginfo` Red Hat:enterprise_linux:7::server	before 0:1.3.7.5-21.el7_5	0:1.3.7.5-21.el7_5
`389-ds-base-libs` Red Hat:enterprise_linux:7::server	before 0:1.3.7.5-21.el7_5	0:1.3.7.5-21.el7_5
`389-ds-base-devel` Red Hat:enterprise_linux:7::server	before 0:1.3.7.5-21.el7_5	0:1.3.7.5-21.el7_5
`389-ds-base-snmp` Red Hat:enterprise_linux:7::server	before 0:1.3.7.5-21.el7_5	0:1.3.7.5-21.el7_5
`389-ds-base` Red Hat:enterprise_linux:7::workstation	before 0:1.3.7.5-21.el7_5	0:1.3.7.5-21.el7_5
`389-ds-base-debuginfo` Red Hat:enterprise_linux:7::workstation	before 0:1.3.7.5-21.el7_5	0:1.3.7.5-21.el7_5
`389-ds-base-libs` Red Hat:enterprise_linux:7::workstation	before 0:1.3.7.5-21.el7_5	0:1.3.7.5-21.el7_5
`389-ds-base-devel` Red Hat:enterprise_linux:7::workstation	before 0:1.3.7.5-21.el7_5	0:1.3.7.5-21.el7_5
`389-ds-base-snmp` Red Hat:enterprise_linux:7::workstation	before 0:1.3.7.5-21.el7_5	0:1.3.7.5-21.el7_5
`389-ds` SUSE:Linux Enterprise Module for Server Applications 15 From an advisory covering 8 CVEs	before 1.4.0.26~git0.8a2d3de6f-4.14.1	1.4.0.26~git0.8a2d3de6f-4.14.1
`389-ds` SUSE:Linux Enterprise Module for Server Applications 15 SP1 From an advisory covering 8 CVEs	before 1.4.0.26~git0.8a2d3de6f-4.14.1	1.4.0.26~git0.8a2d3de6f-4.14.1
`389-ds-base` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 1.3.3.12-1build11.3.3.13-11.3.4.5-21.3.4.8-11.3.4.8-3 Show 4 moreShow less 1.3.4.8-3ubuntu11.3.4.8-41.3.4.9-11.3.4.9-1ubuntu0.1~esm1	None known
`389-ds-base` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 1.3.7.5-11.3.7.5-1build11.3.7.5-1build21.3.7.9-11.3.7.10-11.3.7.10-1ubuntu11.3.7.10-1ubuntu1+esm1	None known
`389-ds-base` Ubuntu:26.04:LTS	All versions, plus listed versions 3.1.2+dfsg1-13.1.2+vendor1-2	None known
`389-ds` openSUSE:Tumbleweed From an advisory covering 11 CVEs	before 2.0.10~git0.21dd2802c-1.1	2.0.10~git0.21dd2802c-1.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-1089 is a high vulnerability (CVSS 7.5) in Unspecified 389-ds-base, published May 9, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.01%, the 90th percentile. Fixed in 389-ds-base 1.3.8.2-1.

References

Show 41 moreShow less