CVE-2017-15135

{"containers": {"cna": {"affected": [{"product": "389-ds-base", "vendor": "Red Hat, Inc.", "versions": [{"status": "affected", "version": "since 1.3.6.1 up to and including 1.4.0.3"}]}], "datePublic": "2017-12-13T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "It was found that 389-ds-base since 1.3.6.1 up to and including 1.4.0.3 did not always handle internal hash comparison operations correctly during the authentication process. A remote, unauthenticated attacker could potentially use this flaw to bypass the authentication process under very rare and specific circumstances."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-287", "description": "CWE-287", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2019-05-15T20:06:08.000Z", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"name": "102811", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/102811"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1525628"}, {"name": "RHSA-2018:0414", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2018:0414"}, {"name": "RHSA-2018:0515", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2018:0515"}, {"name": "openSUSE-SU-2019:1397", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00033.html"}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T19:50:16.357Z"}, "title": "CVE Program Container", "references": [{"name": "102811", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/102811"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1525628"}, {"name": "RHSA-2018:0414", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "https://access.redhat.com/errata/RHSA-2018:0414"}, {"name": "RHSA-2018:0515", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "https://access.redhat.com/errata/RHSA-2018:0515"}, {"name": "openSUSE-SU-2019:1397", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00033.html"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2017-15135", "dateReserved": "2017-10-08T00:00:00.000Z", "dateUpdated": "2024-08-05T19:50:16.357Z", "state": "PUBLISHED", "datePublished": "2018-01-24T15:00:00.000Z"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "389-ds-base", "vendor": "Red Hat, Inc.", "versions": [{"status": "affected", "version": "since 1.3.6.1 up to and including 1.4.0.3"}]}], "source": "secalert@redhat.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:fedoraproject:389_directory_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "9917C1A6-93B5-415D-B8F2-0131B9345A09", "versionEndIncluding": "1.4.0.3", "versionStartIncluding": "1.3.6.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "It was found that 389-ds-base since 1.3.6.1 up to and including 1.4.0.3 did not always handle internal hash comparison operations correctly during the authentication process. A remote, unauthenticated attacker could potentially use this flaw to bypass the authentication process under very rare and specific circumstances."}, {"lang": "es", "value": "Se ha descubierto que 389-ds-base, desde la versi\u00f3n 1.3.6.1 y hasta e incluyendo la versi\u00f3n 1.4.0.3, no manipulaba siempre las operaciones de comparaci\u00f3n de hash internas de manera correcta durante el proceso de autenticaci\u00f3n. Un atacante remoto no autenticado podr\u00eda emplear este error para omitir el proceso de autenticaci\u00f3n bajo circunstancias muy excepcionales."}], "id": "CVE-2017-15135", "lastModified": "2026-06-17T01:07:18.747", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 2.2, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-01-24T15:29:01.167", "references": [{"source": "secalert@redhat.com", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00033.html"}, {"source": "secalert@redhat.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/102811"}, {"source": "secalert@redhat.com", "url": "https://access.redhat.com/errata/RHSA-2018:0414"}, {"source": "secalert@redhat.com", "url": "https://access.redhat.com/errata/RHSA-2018:0515"}, {"source": "secalert@redhat.com", "tags": ["Issue Tracking", "Patch", "Third Party Advisory"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1525628"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00033.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/102811"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://access.redhat.com/errata/RHSA-2018:0414"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://access.redhat.com/errata/RHSA-2018:0515"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Patch", "Third Party Advisory"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1525628"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "secalert@redhat.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-287"}], "source": "nvd@nist.gov", "type": "Secondary"}]}

{"acknowledgement": "This issue was discovered by Martin Poole (Red Hat).", "affected_release": [{"advisory": "RHSA-2018:0515", "cpe": "cpe:/o:redhat:enterprise_linux:6", "package": "389-ds-base-0:1.2.11.15-94.el6_9", "product_name": "Red Hat Enterprise Linux 6", "release_date": "2018-03-13T00:00:00Z"}, {"advisory": "RHSA-2018:0414", "cpe": "cpe:/o:redhat:enterprise_linux:7", "package": "389-ds-base-0:1.3.6.1-28.el7_4", "product_name": "Red Hat Enterprise Linux 7", "release_date": "2018-03-06T00:00:00Z"}], "bugzilla": {"description": "389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c", "id": "1525628", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1525628"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.6", "cvss3_scoring_vector": "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L", "status": "verified"}, "cwe": "CWE-287", "details": ["It was found that 389-ds-base since 1.3.6.1 up to and including 1.4.0.3 did not always handle internal hash comparison operations correctly during the authentication process. A remote, unauthenticated attacker could potentially use this flaw to bypass the authentication process under very rare and specific circumstances.", "It was found that 389-ds-base did not always handle internal hash comparison operations correctly during the authentication process. A remote, unauthenticated attacker could potentially use this flaw to bypass the authentication process under very rare and specific circumstances."], "name": "CVE-2017-15135", "public_date": "2018-01-22T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2017-15135\nhttps://nvd.nist.gov/vuln/detail/CVE-2017-15135"], "threat_severity": "Moderate"}

{}