[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fP0U79OkEakYVNb4asdkBbg8frEn0Sf_6cdEQC2MJUZU":3,"g5a-risk:CVE-2019-3883":173},{"success":4,"data":5,"meta":171},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":48,"epssPercentile":26,"epssTimeSeries":49,"severity":50,"affectedProducts":51,"affectedProductsCount":67,"references":68,"referencesCount":96,"weaknesses":97,"weaknessesCount":106,"isActivelyExploited":107,"cisaInfo":26,"otxData":26,"relatedBlogPosts":108,"seoMetadata":109,"configurations":134,"relatedVendorCves":155,"notableEvents":156},"CVE-2019-3883","What is CVE-2019-3883?","In 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will be waited by the worker for at most 'ioblocktimeout' seconds. However this timeout applies only for un-encrypted requests. Connections using SSL\u002FTLS are not taking this timeout into account during reads, and may hang longer.An unauthenticated attacker could repeatedly create hanging LDAP requests to hang all the workers, resulting in a Denial of Service.","In 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will be waited by the worker for at most 'ioblocktimeout' seconds...","2019-04-17T14:29:03.62","2023-04-24T09:15:07.85",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":39,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":27,"ImpactScore":38},"secalert@redhat.com","Secondary",{"Version":34,"VectorString":35,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":22,"BaseScore":36,"BaseSeverity":37,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",5.3,"MEDIUM",1.4,[40],{"Source":17,"Type":18,"CVSSData":41,"BaseSeverity":37,"ExploitabilityScore":46,"ImpactScore":47,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":42,"VectorString":43,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":44,"BaseScore":45,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",5,10,2.9,0.08202,[48,48,48,48,48,48,48],"High",[52,57,62],{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"fedoraproject","389_directory_server","*","cpe:2.3:a:fedoraproject:389_directory_server:*:*:*:*:*:*:*:*",{"vendor":58,"product":59,"version":60,"criteria":61,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":63,"product":64,"version":65,"criteria":66,"vulnerable":4},"redhat","enterprise_linux","6.0","cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",3,[69,74,77,81,86,89,93],{"url":70,"source":71,"tags":72},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:1896","Red Hat",[73],"Third Party Advisory",{"url":75,"source":71,"tags":76},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:3401",[73],{"url":78,"source":71,"tags":79},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=CVE-2019-3883",[80,73],"Issue Tracking",{"url":82,"source":83,"tags":84},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2019\u002F05\u002Fmsg00008.html","Debian",[85,73],"Mailing List",{"url":87,"source":83,"tags":88},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2023\u002F04\u002Fmsg00026.html",[],{"url":90,"source":91,"tags":92},"https:\u002F\u002Fpagure.io\u002F389-ds-base\u002Fissue\u002F50329","Pagure",[80,73],{"url":94,"source":91,"tags":95},"https:\u002F\u002Fpagure.io\u002F389-ds-base\u002Fpull-request\u002F50331",[73],7,[98],{"id":99,"name":100,"description":101,"extendedDescription":102,"status":103,"abstraction":104,"structure":105},"CWE-772","Missing Release of Resource after Effective Lifetime","The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.","When a resource is not released after use, it can allow attackers to cause a denial of service by causing the allocation of resources without triggering their release. Frequently-affected resources include memory, CPU, disk space, power or battery, etc.","Draft","Base","Simple",1,false,[],{"title":110,"metaDescription":111,"keywords":112,"canonicalUrl":113,"structuredData":114},"What is CVE-2019-3883? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-3883, a high severity cyber security vulnerability from 2019. In 389-ds-base up to version 1.4.1.2, requests are handled b...","CVE-2019-3883, CVE-2019-3883 vulnerability, CVE-2019-3883 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, fedoraproject security, debian security, redhat security, 389_directory_server vulnerability, debian_linux vulnerability, enterprise_linux vulnerability","\u002Fwhat-is\u002Fcve-2019-3883",{"@context":115,"@type":116,"headline":110,"description":111,"datePublished":10,"dateModified":11,"author":117,"publisher":121,"about":125,"mainEntityOfPage":129,"articleSection":132,"keywords":133},"https:\u002F\u002Fschema.org","TechArticle",{"@type":118,"name":119,"url":120},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":118,"name":119,"url":120,"logo":122},{"@type":123,"url":124},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":126,"name":6,"description":127,"additionalType":128},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":130,"@id":131},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-3883","Cybersecurity","CVE-2019-3883, CVE-2019-3883 vulnerability, CVE-2019-3883 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[135,143,149],{"Operator":26,"Negate":26,"Nodes":136},[137],{"Operator":138,"Negate":26,"CPEMatch":139},"OR",[140],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":141,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":142},"3404A8FB-F784-425E-9BAA-8C65E5252A38","1.4.1.2",{"Operator":26,"Negate":26,"Nodes":144},[145],{"Operator":138,"Negate":26,"CPEMatch":146},[147],{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":148,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Operator":26,"Negate":26,"Nodes":150},[151],{"Operator":138,"Negate":26,"CPEMatch":152},[153],{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":154,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC",[],[157,164],{"id":158,"eventType":159,"eventTime":160,"details":161,"label":162,"color":163},"09cbf7a0-c86a-4cc7-a645-e69780276cc1","HIGH_EPSS_DELTA","2025-11-19T04:06:31.935465+00:00","Daily EPSS score increased by 0.180 on 2023-12-30","EPSS Score Increased","red",{"id":165,"eventType":166,"eventTime":167,"details":168,"label":169,"color":170},"ea6b45a3-78ff-4174-9058-2a85c55788f5","LOW_EPSS_DELTA","2025-11-22T04:06:20.093281+00:00","Daily EPSS score decreased by 0.180 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":172,"version":42},1792366492148,{"score":174,"band":175,"action":176,"scoredAt":177},48,"Medium","Plan remediation","2026-10-16T06:46:00.169863+00:00"]