TI-2024-03412 CVE-2024-3657
389-ds-base: potential denial of service via specially crafted kerberos as-req request
Priority MEDIUM 41
A flaw was found in 389-ds-base.
RHSA-2024:5690
389-ds:1.4 security update
Released 2024-08-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.8.8) 389-ds-base-1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4, 389-ds-base-1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4, 389-ds-base-1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4 +19
Fixes 4 records
TI-2024-05517 CVE-2024-5953 · GHSA-9h7v-6cr6-hcpx
389-ds-base: malformed userpassword hash may cause denial of service
Priority LOW 26
A denial of service vulnerability was found in the 389-ds-base LDAP server.
TI-2024-02042 CVE-2024-2199
389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c
Priority LOW 26
A denial of service vulnerability was found in 389-ds-base ldap server.
TI-2024-00983 CVE-2024-1062 · GHSA-6v6c-gc45-x65c
389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)
Priority LOW 25
A heap overflow flaw was found in 389-ds-base.