TI-2024-05784 CVE-2024-6237 · GHSA-2fpj-qhmc-jpvc
389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request
Priority LOW 37
A flaw was found in the 389 Directory Server.
RHSA-2024:4997
redhat-ds:12 security and bug fix update
Released 2024-08-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Directory Server 12.4 for RHEL 9 389-ds-base-2.4.5-7.module+el9dsrv+22137+7a1133f7.src::redhat-ds:12, 389-ds-base-2.4.5-7.module+el9dsrv+22137+7a1133f7.x86_64::redhat-ds:12, 389-ds-base-devel-2.4.5-7.module+el9dsrv+22137+7a1133f7.x86_64::redhat-ds:12 +4
Fixes 2 records
TI-2024-05517 CVE-2024-5953 · GHSA-9h7v-6cr6-hcpx
389-ds-base: malformed userpassword hash may cause denial of service
Priority LOW 26
A denial of service vulnerability was found in the 389-ds-base LDAP server.