Red Hat Security Advisory

RHSA-2024:6153

389-ds-base security update

Released 2024-09-03 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) 389-ds-base-1.3.11.1-6.el7_9, 389-ds-base-libs-1.3.11.1-6.el7_9
Red Hat Enterprise Linux Server Optional (v. 7 ELS) 389-ds-base-1.3.11.1-6.el7_9, 389-ds-base-devel-1.3.11.1-6.el7_9, 389-ds-base-libs-1.3.11.1-6.el7_9 +1

Fixes 1 record

TI-2024-05517 CVE-2024-5953 · GHSA-9h7v-6cr6-hcpx

389-ds-base: malformed userpassword hash may cause denial of service

LOW 26

A denial of service vulnerability was found in the 389-ds-base LDAP server.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00578 Published 2024-06-18 Partial fix · 8060020250210084424.0ca98e7e, 8080020240909040333.f969626e +8 CWE-1288