TI-2024-03412 CVE-2024-3657
389-ds-base: potential denial of service via specially crafted kerberos as-req request
Priority MEDIUM 41
A flaw was found in 389-ds-base.
RHSA-2024:4209
redhat-ds:11 security and bug fix update
Released 2024-07-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Directory Server 11.8 for RHEL 8 389-ds-base-1.4.3.37-10.module+el8dsrv+21971+f7435891.src::redhat-ds:11, 389-ds-base-1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11, 389-ds-base-devel-1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11 +5
Fixes 3 records
TI-2024-02042 CVE-2024-2199
389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c
Priority LOW 26
A denial of service vulnerability was found in 389-ds-base ldap server.
TI-2024-00983 CVE-2024-1062 · GHSA-6v6c-gc45-x65c
389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)
Priority LOW 25
A heap overflow flaw was found in 389-ds-base.