Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-kgfj-ur5s-97hd
Summary389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds-base handles persistent search, resulting in a crash if the server is under load. An anonymous attacker could use this flaw to trigger a denial of service.
Aliases
0
alias CVE-2018-10850
Fixed_packages
0
url pkg:deb/debian/389-ds-base@1.4.0.15-1?distro=trixie
purl pkg:deb/debian/389-ds-base@1.4.0.15-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@1.4.0.15-1%3Fdistro=trixie
1
url pkg:deb/debian/389-ds-base@1.4.0.21-1
purl pkg:deb/debian/389-ds-base@1.4.0.21-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4gwa-5ha9-2yep
1
vulnerability VCID-6668-ae1t-43bn
2
vulnerability VCID-7k3x-hspm-2bh1
3
vulnerability VCID-8d2y-q7qm-ukba
4
vulnerability VCID-f4xw-eaee-tbaf
5
vulnerability VCID-fe6s-f2sw-tbdb
6
vulnerability VCID-sfpm-3ead-t7ds
7
vulnerability VCID-svne-c12c-hucb
8
vulnerability VCID-sz1r-ts2d-uqam
9
vulnerability VCID-twz6-mtum-qbck
10
vulnerability VCID-uz8q-6ydj-x3cu
11
vulnerability VCID-v1ut-bxzt-kqet
12
vulnerability VCID-v94q-q9gt-zkcq
13
vulnerability VCID-xv3p-gza9-4bcg
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@1.4.0.21-1
2
url pkg:deb/debian/389-ds-base@1.4.4.11-2?distro=trixie
purl pkg:deb/debian/389-ds-base@1.4.4.11-2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5mdk-bqm7-mkeu
1
vulnerability VCID-7dna-4mcn-jqd5
2
vulnerability VCID-ft29-jr9j-jbbm
3
vulnerability VCID-k27f-tsq5-73fn
4
vulnerability VCID-ud9m-jz3k-bfhm
5
vulnerability VCID-vadc-mdbp-q3g9
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@1.4.4.11-2%3Fdistro=trixie
3
url pkg:deb/debian/389-ds-base@2.3.1%2Bdfsg1-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/389-ds-base@2.3.1%2Bdfsg1-1%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5mdk-bqm7-mkeu
1
vulnerability VCID-7dna-4mcn-jqd5
2
vulnerability VCID-ft29-jr9j-jbbm
3
vulnerability VCID-k27f-tsq5-73fn
4
vulnerability VCID-ud9m-jz3k-bfhm
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@2.3.1%252Bdfsg1-1%252Bdeb12u1%3Fdistro=trixie
4
url pkg:deb/debian/389-ds-base@3.1.2%2Bdfsg1-1%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/389-ds-base@3.1.2%2Bdfsg1-1%2Bdeb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@3.1.2%252Bdfsg1-1%252Bdeb13u1%3Fdistro=trixie
5
url pkg:deb/debian/389-ds-base@3.1.2%2Bvendor1-2?distro=trixie
purl pkg:deb/debian/389-ds-base@3.1.2%2Bvendor1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@3.1.2%252Bvendor1-2%3Fdistro=trixie
Affected_packages
0
url pkg:deb/debian/389-ds-base@1.3.3.5-4
purl pkg:deb/debian/389-ds-base@1.3.3.5-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ncv-1mvn-3ua2
1
vulnerability VCID-3182-86wa-ffgn
2
vulnerability VCID-4gwa-5ha9-2yep
3
vulnerability VCID-6668-ae1t-43bn
4
vulnerability VCID-7k3x-hspm-2bh1
5
vulnerability VCID-8d2y-q7qm-ukba
6
vulnerability VCID-92hm-bx5r-2kb5
7
vulnerability VCID-cuaw-efm3-5kb6
8
vulnerability VCID-f4xw-eaee-tbaf
9
vulnerability VCID-fe6s-f2sw-tbdb
10
vulnerability VCID-kgfj-ur5s-97hd
11
vulnerability VCID-kyw9-xd61-effu
12
vulnerability VCID-m9ab-q9cx-suhk
13
vulnerability VCID-pqup-v2we-kqat
14
vulnerability VCID-qybp-25x7-6fak
15
vulnerability VCID-sfpm-3ead-t7ds
16
vulnerability VCID-svne-c12c-hucb
17
vulnerability VCID-sz1r-ts2d-uqam
18
vulnerability VCID-ta8n-wu4n-qqfq
19
vulnerability VCID-tjhk-xzr6-p7dx
20
vulnerability VCID-twz6-mtum-qbck
21
vulnerability VCID-u5q1-nkup-f7ga
22
vulnerability VCID-uz8q-6ydj-x3cu
23
vulnerability VCID-v1ut-bxzt-kqet
24
vulnerability VCID-v94q-q9gt-zkcq
25
vulnerability VCID-wvqp-u8kz-8bd4
26
vulnerability VCID-xryf-2vae-j7gk
27
vulnerability VCID-xv3p-gza9-4bcg
28
vulnerability VCID-yrgr-fu6h-ykh9
29
vulnerability VCID-ytmc-t4we-y7gr
30
vulnerability VCID-znf9-cydr-nqbm
31
vulnerability VCID-zrba-h7st-jbgz
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@1.3.3.5-4
1
url pkg:deb/debian/389-ds-base@1.3.5.17-2
purl pkg:deb/debian/389-ds-base@1.3.5.17-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ncv-1mvn-3ua2
1
vulnerability VCID-3182-86wa-ffgn
2
vulnerability VCID-4gwa-5ha9-2yep
3
vulnerability VCID-6668-ae1t-43bn
4
vulnerability VCID-7k3x-hspm-2bh1
5
vulnerability VCID-8d2y-q7qm-ukba
6
vulnerability VCID-f4xw-eaee-tbaf
7
vulnerability VCID-fe6s-f2sw-tbdb
8
vulnerability VCID-kgfj-ur5s-97hd
9
vulnerability VCID-kyw9-xd61-effu
10
vulnerability VCID-pqup-v2we-kqat
11
vulnerability VCID-sfpm-3ead-t7ds
12
vulnerability VCID-svne-c12c-hucb
13
vulnerability VCID-sz1r-ts2d-uqam
14
vulnerability VCID-ta8n-wu4n-qqfq
15
vulnerability VCID-tjhk-xzr6-p7dx
16
vulnerability VCID-twz6-mtum-qbck
17
vulnerability VCID-uz8q-6ydj-x3cu
18
vulnerability VCID-v1ut-bxzt-kqet
19
vulnerability VCID-v94q-q9gt-zkcq
20
vulnerability VCID-wvqp-u8kz-8bd4
21
vulnerability VCID-xryf-2vae-j7gk
22
vulnerability VCID-xv3p-gza9-4bcg
23
vulnerability VCID-znf9-cydr-nqbm
24
vulnerability VCID-zrba-h7st-jbgz
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@1.3.5.17-2
2
url pkg:rpm/redhat/389-ds-base@1.3.7.5-28?arch=el7_5
purl pkg:rpm/redhat/389-ds-base@1.3.7.5-28?arch=el7_5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kgfj-ur5s-97hd
1
vulnerability VCID-tjhk-xzr6-p7dx
2
vulnerability VCID-xryf-2vae-j7gk
3
vulnerability VCID-zrba-h7st-jbgz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/389-ds-base@1.3.7.5-28%3Farch=el7_5
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10850.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10850.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-10850
reference_id
reference_type
scores
0
value 0.01544
scoring_system epss
scoring_elements 0.81716
published_at 2026-06-04T12:55:00Z
1
value 0.01544
scoring_system epss
scoring_elements 0.81746
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-10850
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10850
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10850
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1588056
reference_id 1588056
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1588056
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=903501
reference_id 903501
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=903501
6
reference_url https://access.redhat.com/errata/RHSA-2018:2757
reference_id RHSA-2018:2757
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:2757
Weaknesses
0
cwe_id 362
name Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
description The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.
Exploits
Severity_range_score5.9 - 5.9
Exploitability0.5
Weighted_severity5.3
Risk_score2.6
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-kgfj-ur5s-97hd