PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›CVE-2016-0741

CVE-2016-0741

389-ds-base: worker threads do not detect abnormally closed connections causing DoS

Loading…

Severity

Important

Red Hat Product Security

5

CVSS 2.0

Review impact separately from score.

Published · January 15, 2016

Updated · June 27, 2026

Description

An infinite-loop vulnerability was discovered in the 389 directory server, where the server failed to correctly handle unexpectedly closed client connections. A remote attacker able to connect to the server could use this flaw to make the directory server consume an excessive amount of CPU and stop accepting connections (denial of service).

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 2.0 · 5
AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')