CVE-2010-4746
Severity CVSS v4.0:
Pending analysis
Type:
CWE-399
Resource Management Errors
Publication date:
23/02/2011
Last modified:
11/04/2025
Description
Multiple memory leaks in the normalization functionality in 389 Directory Server before 1.2.7.5 allow remote attackers to cause a denial of service (memory consumption) via "badly behaved applications," related to (1) Slapi_Attr mishandling in the DN normalization code and (2) pointer mishandling in the syntax normalization code, a different issue than CVE-2011-0019.
Impact
Base Score 2.0
5.00
Severity 2.0
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:fedoraproject:389_directory_server:*:alpha3:*:*:*:*:*:* | 1.2.7 (including) | |
| cpe:2.3:a:fedoraproject:389_directory_server:1.2.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:fedoraproject:389_directory_server:1.2.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:fedoraproject:389_directory_server:1.2.3:*:*:*:*:*:*:* | ||
| cpe:2.3:a:fedoraproject:389_directory_server:1.2.5:*:*:*:*:*:*:* | ||
| cpe:2.3:a:fedoraproject:389_directory_server:1.2.5:rc1:*:*:*:*:*:* | ||
| cpe:2.3:a:fedoraproject:389_directory_server:1.2.5:rc2:*:*:*:*:*:* | ||
| cpe:2.3:a:fedoraproject:389_directory_server:1.2.5:rc3:*:*:*:*:*:* | ||
| cpe:2.3:a:fedoraproject:389_directory_server:1.2.5:rc4:*:*:*:*:*:* | ||
| cpe:2.3:a:fedoraproject:389_directory_server:1.2.6:*:*:*:*:*:*:* | ||
| cpe:2.3:a:fedoraproject:389_directory_server:1.2.6:a2:*:*:*:*:*:* | ||
| cpe:2.3:a:fedoraproject:389_directory_server:1.2.6:a3:*:*:*:*:*:* | ||
| cpe:2.3:a:fedoraproject:389_directory_server:1.2.6:a4:*:*:*:*:*:* | ||
| cpe:2.3:a:fedoraproject:389_directory_server:1.2.6:rc1:*:*:*:*:*:* | ||
| cpe:2.3:a:fedoraproject:389_directory_server:1.2.6:rc2:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page