Read the docs
TI-2024-02042 Aliases CVE-2024-2199

389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c

Priority LOW 26CWE-20Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 15 fixed, 1 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.

Summary

A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00565 47th percentileScored 2026-11-07
Fix Partial 389-ds-base: 3.1.1Red Hat: 9 advisoriesRed Hat: 15 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—389-ds-basebefore 3.1.13.1.1Patch availableCNA
Red HatRed Hat Directory Server 11.5 E4S for RHEL 8—8060020250210084424.0ca98e7ePatch availableCNA
Red HatRed Hat Directory Server 11.8 for RHEL 8—8090020240606122459.91529cd0Patch availableCNA
Red HatRed Hat Directory Server 11.9 for RHEL 8—8100020240604161237.37ed7c03Patch availableCNA
Red HatRed Hat Directory Server 12.4 for RHEL 9—9040020240604143706.1674d574Patch availableCNA
Red HatRed Hat Enterprise Linux 7—1.3.11.1-5.el7_9Patch availableCNA
Red HatRed Hat Enterprise Linux 8—8100020240613122040.25e700aaPatch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support—8080020240807050952.6dbb3803Patch availableCNA
Red HatRed Hat Enterprise Linux 9—2.4.5-8.el9_4Patch availableCNA
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support—2.2.4-9.el9_2Patch availableCNA
Red HatRed Hat Enterprise Linux 6——No fix listedCNA
  • 389-ds-base Vendor— Affected before 3.1.1 Fixed in 3.1.1 Patch available CNA
  • Red Hat Directory Server 11.5 E4S for RHEL 8 VendorRed Hat Affected — Fixed in 8060020250210084424.0ca98e7e Patch available CNA
  • Red Hat Directory Server 11.8 for RHEL 8 VendorRed Hat Affected — Fixed in 8090020240606122459.91529cd0 Patch available CNA
  • Red Hat Directory Server 11.9 for RHEL 8 VendorRed Hat Affected — Fixed in 8100020240604161237.37ed7c03 Patch available CNA
  • Red Hat Directory Server 12.4 for RHEL 9 VendorRed Hat Affected — Fixed in 9040020240604143706.1674d574 Patch available CNA
  • Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in 1.3.11.1-5.el7_9 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 8100020240613122040.25e700aa Patch available CNA
  • Red Hat Enterprise Linux 8.8 Extended Update Support VendorRed Hat Affected — Fixed in 8080020240807050952.6dbb3803 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 2.4.5-8.el9_4 Patch available CNA
  • Red Hat Enterprise Linux 9.2 Extended Update Support VendorRed Hat Affected — Fixed in 2.2.4-9.el9_2 Patch available CNA
  • Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — No fix listed CNA

CPE names CNA · 14

CPEVersionsRoleVendor
cpe:/a:redhat:directory_server_e4s:11.5::el811.5—Red Hat
cpe:/a:redhat:directory_server:11.8::el811.8—Red Hat
cpe:/a:redhat:directory_server:11.9::el811.9—Red Hat
cpe:/a:redhat:directory_server:12.4::el912.4—Red Hat
cpe:/o:redhat:enterprise_linux:7::client7—Red Hat
cpe:/o:redhat:enterprise_linux:7::computenode7—Red Hat
cpe:/o:redhat:enterprise_linux:7::server7—Red Hat
cpe:/o:redhat:enterprise_linux:7::workstation7—Red Hat
cpe:/a:redhat:enterprise_linux:8::appstream8—Red Hat
cpe:/a:redhat:rhel_eus:8.8::appstream8.8—Red Hat
  • cpe:/a:redhat:directory_server_e4s:11.5::el8 Versions 11.5 — ·Red Hat
  • cpe:/a:redhat:directory_server:11.8::el8 Versions 11.8 — ·Red Hat
  • cpe:/a:redhat:directory_server:11.9::el8 Versions 11.9 — ·Red Hat
  • cpe:/a:redhat:directory_server:12.4::el9 Versions 12.4 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux:7::client Versions 7 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux:7::computenode Versions 7 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux:7::server Versions 7 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux:7::workstation Versions 7 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:8::appstream Versions 8 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:8.8::appstream Versions 8.8 — ·Red Hat
Show 4 more CPE
CPEVersionsRoleVendor
cpe:/a:redhat:enterprise_linux:9::appstream9—Red Hat
cpe:/a:redhat:enterprise_linux:9::crb9—Red Hat
cpe:/a:redhat:rhel_eus:9.2::appstream9.2—Red Hat
cpe:/o:redhat:rhel_els:66—Red Hat
  • cpe:/a:redhat:enterprise_linux:9::appstream Versions 9 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:9::crb Versions 9 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.2::appstream Versions 9.2 — ·Red Hat
  • cpe:/o:redhat:rhel_els:6 Versions 6 — ·Red Hat

Remediation

  • Fix · CNA 389-ds-base Fixed in 3.1.1

Red Hat 9 advisories

  • RHSA-2025:1632 Released 2025-02-18 · Red Hat rating Important
    redhat-ds:11 security update
    • Red Hat Directory Server 11.5 E4S for RHEL 8 389-ds-base-1.4.3.34-4.module+el8dsrv+22781+5fe99dde.src::redhat-ds:11, 389-ds-base-1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11, 389-ds-base-devel-1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11 +5
  • RHSA-2024:5690 Released 2024-08-21 · Red Hat rating Important
    389-ds:1.4 security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) 389-ds-base-1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4, 389-ds-base-1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4, 389-ds-base-1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4 +19
  • RHSA-2024:4633 Released 2024-07-18 · Red Hat rating Important
    389-ds-base security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) 389-ds-base-2.2.4-9.el9_2, 389-ds-base-libs-2.2.4-9.el9_2, python3-lib389-2.2.4-9.el9_2
Show 6 more Red Hat advisories
  • RHSA-2024:4235 Released 2024-07-02 · Red Hat rating Important
    389-ds security update
    • Red Hat Enterprise Linux AppStream (v. 8) 389-ds-base-1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4, 389-ds-base-1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4, 389-ds-base-1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4 +19
  • RHSA-2024:4210 Released 2024-07-02 · Red Hat rating Important
    redhat-ds:11 security update
    • Red Hat Directory Server 11.9 for RHEL 8 389-ds-base-1.4.3.39-4.module+el8dsrv+21965+9ff26197.src::redhat-ds:11, 389-ds-base-1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11, 389-ds-base-devel-1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11 +5
  • RHSA-2024:4209 Released 2024-07-02 · Red Hat rating Important
    redhat-ds:11 security and bug fix update
    • Red Hat Directory Server 11.8 for RHEL 8 389-ds-base-1.4.3.37-10.module+el8dsrv+21971+f7435891.src::redhat-ds:11, 389-ds-base-1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11, 389-ds-base-devel-1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11 +5
  • RHSA-2024:4092 Released 2024-06-25 · Red Hat rating Important
    redhat-ds:12 security, bug fix update
    • Red Hat Directory Server 12.4 for RHEL 9 389-ds-base-2.4.5-4.module+el9dsrv+21964+c7e95493.src::redhat-ds:12, 389-ds-base-2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12, 389-ds-base-devel-2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12 +4
  • RHSA-2024:3837 Released 2024-06-11 · Red Hat rating Important
    389-ds-base security update
    • Red Hat Enterprise Linux AppStream (v. 9) 389-ds-base-2.4.5-8.el9_4, 389-ds-base-libs-2.4.5-8.el9_4, python3-lib389-2.4.5-8.el9_4
    • Red Hat Enterprise Linux CRB (v. 9) 389-ds-base-devel-2.4.5-8.el9_4
  • RHSA-2024:3591 Released 2024-06-04 · Red Hat rating Important
    389-ds-base security update
    • Red Hat Enterprise Linux Client Optional (v. 7) 389-ds-base-1.3.11.1-5.el7_9, 389-ds-base-devel-1.3.11.1-5.el7_9, 389-ds-base-libs-1.3.11.1-5.el7_9 +1
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) 389-ds-base-1.3.11.1-5.el7_9, 389-ds-base-devel-1.3.11.1-5.el7_9, 389-ds-base-libs-1.3.11.1-5.el7_9 +1
    • Red Hat Enterprise Linux Server (v. 7) 389-ds-base-1.3.11.1-5.el7_9, 389-ds-base-libs-1.3.11.1-5.el7_9
    • Red Hat Enterprise Linux Server Optional (v. 7) 389-ds-base-1.3.11.1-5.el7_9, 389-ds-base-devel-1.3.11.1-5.el7_9, 389-ds-base-libs-1.3.11.1-5.el7_9 +1
    • Red Hat Enterprise Linux Workstation (v. 7) 389-ds-base-1.3.11.1-5.el7_9, 389-ds-base-libs-1.3.11.1-5.el7_9
    • Red Hat Enterprise Linux Workstation Optional (v. 7) 389-ds-base-devel-1.3.11.1-5.el7_9, 389-ds-base-snmp-1.3.11.1-5.el7_9

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Red Hat Directory Server 11.5 E4S for RHEL 8, Red Hat Directory Server 11.8 for RHEL 8 and 8 more products — RHSA-2024:3591

    2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2024-03412 389-ds-base: potential denial of service via specially crafted kerberos as-req requestPriority MEDIUM 41
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Directory Server 11.5 E4S for RHEL 8, Red Hat Directory Server 11.8 for RHEL 8 and 8 more products — RHSA-2024:3837

    2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2024-03412 389-ds-base: potential denial of service via specially crafted kerberos as-req requestPriority MEDIUM 41
    Show all 2 records → Advisory →
Show 3 more groups
  • Advisory ·

    Red Hat Directory Server 11.5 E4S for RHEL 8, Red Hat Directory Server 11.8 for RHEL 8 and 8 more products — RHSA-2024:4092

    2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2024-03412 389-ds-base: potential denial of service via specially crafted kerberos as-req requestPriority MEDIUM 41
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Directory Server 11.5 E4S for RHEL 8, Red Hat Directory Server 11.8 for RHEL 8 and 8 more products — RHSA-2024:4210

    2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2024-03412 389-ds-base: potential denial of service via specially crafted kerberos as-req requestPriority MEDIUM 41
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Directory Server 11.5 E4S for RHEL 8, Red Hat Directory Server 11.8 for RHEL 8 and 8 more products — RHSA-2024:4235

    2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2024-03412 389-ds-base: potential denial of service via specially crafted kerberos as-req requestPriority MEDIUM 41
    Show all 2 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Directory Server 11.5 E4S for RHEL 8Fixed RHSA-2025:1632
Red Hat Directory Server 11.8 for RHEL 8Fixed RHSA-2024:4209
Red Hat Directory Server 11.9 for RHEL 8Fixed RHSA-2024:4210
Red Hat Directory Server 12.4 for RHEL 9Fixed RHSA-2024:4092
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2024:4235
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2024:3837
Red Hat Enterprise Linux AppStream EUS (v.8.8)Fixed RHSA-2024:5690
Red Hat Enterprise Linux AppStream EUS (v.9.2)Fixed RHSA-2024:4633
Red Hat Enterprise Linux CRB (v. 9)Fixed RHSA-2024:3837
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2024:3591
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2024:3591
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2024:3591
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2024:3591
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2024:3591
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2024:3591

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-2199

References

Advisory 9

Other 3

  • TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
  • TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
See all 7413 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences