TI-2024-05784 CVE-2024-6237 · GHSA-2fpj-qhmc-jpvc
389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request
Priority LOW 37
A flaw was found in the 389 Directory Server.
RHSA-2024:5192
389-ds-base security update
Released 2024-08-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) 389-ds-base-2.4.5-9.el9_4, 389-ds-base-libs-2.4.5-9.el9_4, python3-lib389-2.4.5-9.el9_4
- Red Hat Enterprise Linux CRB (v. 9) 389-ds-base-devel-2.4.5-9.el9_4
Fixes 2 records
TI-2024-05517 CVE-2024-5953 · GHSA-9h7v-6cr6-hcpx
389-ds-base: malformed userpassword hash may cause denial of service
Priority LOW 26
A denial of service vulnerability was found in the 389-ds-base LDAP server.