TI-2024-03412 CVE-2024-3657
389-ds-base: potential denial of service via specially crafted kerberos as-req request
Priority MEDIUM 41
A flaw was found in 389-ds-base.
RHSA-2024:3591
389-ds-base security update
Released 2024-06-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) 389-ds-base-1.3.11.1-5.el7_9, 389-ds-base-devel-1.3.11.1-5.el7_9, 389-ds-base-libs-1.3.11.1-5.el7_9 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) 389-ds-base-1.3.11.1-5.el7_9, 389-ds-base-devel-1.3.11.1-5.el7_9, 389-ds-base-libs-1.3.11.1-5.el7_9 +1
- Red Hat Enterprise Linux Server (v. 7) 389-ds-base-1.3.11.1-5.el7_9, 389-ds-base-libs-1.3.11.1-5.el7_9
- Red Hat Enterprise Linux Server Optional (v. 7) 389-ds-base-1.3.11.1-5.el7_9, 389-ds-base-devel-1.3.11.1-5.el7_9, 389-ds-base-libs-1.3.11.1-5.el7_9 +1
- Red Hat Enterprise Linux Workstation (v. 7) 389-ds-base-1.3.11.1-5.el7_9, 389-ds-base-libs-1.3.11.1-5.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) 389-ds-base-devel-1.3.11.1-5.el7_9, 389-ds-base-snmp-1.3.11.1-5.el7_9
Fixes 2 records
TI-2024-02042 CVE-2024-2199
389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c
Priority LOW 26
A denial of service vulnerability was found in 389-ds-base ldap server.