389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)
Priority LOW 25CWE-122Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Partial Red Hat: 8 fixed, 4 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-122 and the CVSS impact.
Summary
A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00307 23rd percentileScored 2026-11-07
Fix Partial 389-ds-base: 2.3.0Red Hat: 8 advisoriesRed Hat: 8 fixed, 4 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | 389-ds-base | 1.4.3.0 and later | 2.3.0 | Patch available | CNA |
| Red Hat | Red Hat Directory Server 11.5 E4S for RHEL 8 | — | 8060020250210084424.0ca98e7e | Patch available | CNA |
| Red Hat | Red Hat Directory Server 11.7 for RHEL 8 | — | 8080020240306153507.f969626e | Patch available | CNA |
| Red Hat | Red Hat Directory Server 11.8 for RHEL 8 | — | 8090020240606122459.91529cd0 | Patch available | CNA |
| Red Hat | Red Hat Directory Server 12.2 EUS for RHEL 9 | — | 9020020240916150035.1674d574 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | 8100020240315011748.945b6f6d | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support | — | 8060020240213164457.824efc52 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | — | 8080020240807050952.6dbb3803 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | — | 2.2.4-9.el9_2 | Patch available | CNA |
| Red Hat | Red Hat Directory Server 12 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 6 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 7 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | — | No fix listed | CNA |
- 389-ds-base Vendor— Affected 1.4.3.0 and later Fixed in 2.3.0 Patch available CNA
- Red Hat Directory Server 11.5 E4S for RHEL 8 VendorRed Hat Affected — Fixed in 8060020250210084424.0ca98e7e Patch available CNA
- Red Hat Directory Server 11.7 for RHEL 8 VendorRed Hat Affected — Fixed in 8080020240306153507.f969626e Patch available CNA
- Red Hat Directory Server 11.8 for RHEL 8 VendorRed Hat Affected — Fixed in 8090020240606122459.91529cd0 Patch available CNA
- Red Hat Directory Server 12.2 EUS for RHEL 9 VendorRed Hat Affected — Fixed in 9020020240916150035.1674d574 Patch available CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 8100020240315011748.945b6f6d Patch available CNA
- Red Hat Enterprise Linux 8.6 Extended Update Support VendorRed Hat Affected — Fixed in 8060020240213164457.824efc52 Patch available CNA
- Red Hat Enterprise Linux 8.8 Extended Update Support VendorRed Hat Affected — Fixed in 8080020240807050952.6dbb3803 Patch available CNA
- Red Hat Enterprise Linux 9.2 Extended Update Support VendorRed Hat Affected — Fixed in 2.2.4-9.el9_2 Patch available CNA
- Red Hat Directory Server 12 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — No fix listed CNA
CPE configurations NVD · 29
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:redhat:389_directory_server:*:*:*:*:*:*:*:* | before 2.2.0 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:directory_server:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:directory_server:11.7:*:*:*:*:*:*:* | 11.7 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:directory_server:11.8:*:*:*:*:*:*:* | 11.8 | Vulnerable | Red Hat |
| cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* | 39 | Vulnerable | Fedoraproject |
| cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:* | 40 | Vulnerable | Fedoraproject |
| cpe:2.3:o:fedoraproject:fedora:41:*:*:*:*:*:*:* | 41 | Vulnerable | Fedoraproject |
| cpe:2.3:a:redhat:directory_server:12.0:*:*:*:*:*:*:* | 12.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:* | 9.2 | Running on | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | Red Hat |
- cpe:2.3:o:redhat:389_directory_server:*:*:*:*:*:*:*:* Versions before 2.2.0 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:directory_server:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Red Hat
- cpe:2.3:a:redhat:directory_server:11.7:*:*:*:*:*:*:* Versions 11.7 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:directory_server:11.8:*:*:*:*:*:*:* Versions 11.8 Vulnerable ·Red Hat
- cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* Versions 39 Vulnerable ·Fedoraproject
- cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:* Versions 40 Vulnerable ·Fedoraproject
- cpe:2.3:o:fedoraproject:fedora:41:*:*:*:*:*:*:* Versions 41 Vulnerable ·Fedoraproject
- cpe:2.3:a:redhat:directory_server:12.0:*:*:*:*:*:*:* Versions 12.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:* Versions 9.2 Running on ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
Show 19 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:* | 8.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:* | 8.8 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:* | 9.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.6:*:*:*:*:*:*:* | 8.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.8:*:*:*:*:*:*:* | 8.8 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.2:*:*:*:*:*:*:* | 9.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.2:*:*:*:*:*:*:* | 9.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.8:*:*:*:*:*:*:* | 8.8 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.8:*:*:*:*:*:*:* | 8.8 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.2:*:*:*:*:*:*:* | 9.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:* | 8.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:* | 9.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:* | 8.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:* | 8.8 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:* | 9.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:* | 8.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:* | 8.8 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:* | 8.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:* | 8.8 | Vulnerable | Red Hat |
- cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat
Remediation
- Fix · CNA 389-ds-base Fixed in 2.3.0
Red Hat 8 advisories
- RHSA-2025:1632 Released 2025-02-18 · Red Hat rating Importantredhat-ds:11 security update
- Red Hat Directory Server 11.5 E4S for RHEL 8 389-ds-base-1.4.3.34-4.module+el8dsrv+22781+5fe99dde.src::redhat-ds:11, 389-ds-base-1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11, 389-ds-base-devel-1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11 +5
- RHSA-2024:7458 Released 2024-10-01 · Red Hat rating Importantredhat-ds:12 security update
- Red Hat Directory Server 12.2 EUS for RHEL 9 389-ds-base-2.2.7-6.module+el9dsrv+22320+37c894f3.src::redhat-ds:12, 389-ds-base-2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12, 389-ds-base-devel-2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12 +4
- RHSA-2024:5690 Released 2024-08-21 · Red Hat rating Important389-ds:1.4 security update
- Red Hat Enterprise Linux AppStream EUS (v.8.8) 389-ds-base-1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4, 389-ds-base-1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4, 389-ds-base-1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4 +19
Show 5 more Red Hat advisories
- RHSA-2024:4633 Released 2024-07-18 · Red Hat rating Important389-ds-base security update
- Red Hat Enterprise Linux AppStream EUS (v.9.2) 389-ds-base-2.2.4-9.el9_2, 389-ds-base-libs-2.2.4-9.el9_2, python3-lib389-2.2.4-9.el9_2
- RHSA-2024:4209 Released 2024-07-02 · Red Hat rating Importantredhat-ds:11 security and bug fix update
- Red Hat Directory Server 11.8 for RHEL 8 389-ds-base-1.4.3.37-10.module+el8dsrv+21971+f7435891.src::redhat-ds:11, 389-ds-base-1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11, 389-ds-base-devel-1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11 +5
- RHSA-2024:3047 Released 2024-05-22 · Red Hat rating Moderate389-ds:1.4 security update
- Red Hat Enterprise Linux AppStream (v. 8) 389-ds-base-1.4.3.39-3.module+el8.10.0+21535+f663b039.aarch64::389-ds:1.4, 389-ds-base-1.4.3.39-3.module+el8.10.0+21535+f663b039.ppc64le::389-ds:1.4, 389-ds-base-1.4.3.39-3.module+el8.10.0+21535+f663b039.s390x::389-ds:1.4 +19
- RHSA-2024:1372 Released 2024-03-19 · Red Hat rating Moderateredhat-ds:11 security, bug fix, and enhancement update
- Red Hat Directory Server 11.7 for RHEL 8 389-ds-base-1.4.3.34-3.module+el8dsrv+21391+b62d2223.src::redhat-ds:11, 389-ds-base-1.4.3.34-3.module+el8dsrv+21391+b62d2223.x86_64::redhat-ds:11, 389-ds-base-devel-1.4.3.34-3.module+el8dsrv+21391+b62d2223.x86_64::redhat-ds:11 +5
- RHSA-2024:1074 Released 2024-03-05 · Red Hat rating Moderate389-ds:1.4 security update
- Red Hat Enterprise Linux AppStream EUS (v.8.6) 389-ds-base-1.4.3.34-6.module+el8.6.0+21315+7f417418.aarch64::389-ds:1.4, 389-ds-base-1.4.3.34-6.module+el8.6.0+21315+7f417418.ppc64le::389-ds:1.4, 389-ds-base-1.4.3.34-6.module+el8.6.0+21315+7f417418.s390x::389-ds:1.4 +19
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Directory Server 12 | Affected | No fix yet |
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Out of support scope |
| Red Hat Enterprise Linux 7 | Affected | No fix planned: Out of support scope |
| Red Hat Enterprise Linux 9 | Affected | No fix yet |
| Red Hat Directory Server 11.5 E4S for RHEL 8 | Fixed | RHSA-2025:1632 |
| Red Hat Directory Server 11.7 for RHEL 8 | Fixed | RHSA-2024:1372 |
| Red Hat Directory Server 11.8 for RHEL 8 | Fixed | RHSA-2024:4209 |
| Red Hat Directory Server 12.2 EUS for RHEL 9 | Fixed | RHSA-2024:7458 |
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2024:3047 |
| Red Hat Enterprise Linux AppStream EUS (v.8.6) | Fixed | RHSA-2024:1074 |
| Red Hat Enterprise Linux AppStream EUS (v.8.8) | Fixed | RHSA-2024:5690 |
| Red Hat Enterprise Linux AppStream EUS (v.9.2) | Fixed | RHSA-2024:4633 |
Timeline
- 2026-10-02 Threatist record created from CVE-2024-1062
- 2026-10-03 Alias added: GHSA-6v6c-gc45-x65c
References
More Red Hat 389 Directory Server vulnerabilities
- TI-2026-13229 Stack-based buffer overflow in Red Hat Directory Server 11.5 E4S for RHEL 8 CVSS 3.1HIGH 7.5
- TI-2026-07965 Resource allocation without limits in 389-ds-base CVSS 3.1HIGH 7.5
- TI-2026-10157 389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check CVSS 3.1HIGH 7.5
- TI-2024-05784 389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request CVSS 3.1MEDIUM 6.5
- TI-2022-01808 Authorization bypass in 389-ds-base CVSS 3.1HIGH 7.5
- TI-2010-02131 NULL pointer dereference in Red Hat Directory Server CVSS 3.1HIGH 7.5
Sources
- CVE-2024-1062 · CVE Program
- CVE-2024-1062 · NVD
- FIRST EPSS
- GHSA-6v6c-gc45-x65c · GitHub Advisory Database · CC BY 4.0
- CVE-2024-1062 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences