Red Hat Security Advisory

RHSA-2024:4210

redhat-ds:11 security update

Released 2024-07-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Directory Server 11.9 for RHEL 8 389-ds-base-1.4.3.39-4.module+el8dsrv+21965+9ff26197.src::redhat-ds:11, 389-ds-base-1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11, 389-ds-base-devel-1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11 +5

Fixes 2 records

TI-2024-03412 CVE-2024-3657

389-ds-base: potential denial of service via specially crafted kerberos as-req request

MEDIUM 41

A flaw was found in 389-ds-base.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01282 Published 2024-05-28 Partial fix · 8060020250210084424.0ca98e7e, 8080020240909040333.f969626e +9 CWE-20

TI-2024-02042 CVE-2024-2199

389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c

LOW 26

A denial of service vulnerability was found in 389-ds-base ldap server.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00565 Published 2024-05-28 Partial fix · 3.1.1, 8060020250210084424.0ca98e7e +8 CWE-20