5.7
Medium
CVE-2024-5953 A denial of service vulnerability was found in the 389-ds-base LDAP server
Description
A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Directory Server 11.5 E4S for RHEL 8 8060020250210084424.0 | earliest → < 8060020250210084424.0ca98e7e | 8060020250210084424.0ca98e7e |
| Red Hat Directory Server 11.7 for RHEL 8 8080020240909040333 | earliest → < 8080020240909040333.f969626e | 8080020240909040333.f969626e |
| Red Hat Directory Server 11.9 for RHEL 8 8100020240902112955.37 | earliest → < 8100020240902112955.37ed7c03 | 8100020240902112955.37ed7c03 |
| Red Hat Directory Server 12.2 EUS for RHEL 9 9020020240916150035.1674 | earliest → < 9020020240916150035.1674d574 | 9020020240916150035.1674d574 |
| Red Hat Directory Server 12.4 for RHEL 9 9040020240723122852.1674 | earliest → < 9040020240723122852.1674d574 | 9040020240723122852.1674d574 |
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | Versions not published | |
| Red Hat Enterprise Linux 8 8100020240910065753.25 | earliest → < 8100020240910065753.25e700aa | 8100020240910065753.25e700aa |
| Red Hat Enterprise Linux 8.8 Extended Update Support 8080020240807050952.6 | earliest → < 8080020240807050952.6dbb3803 | 8080020240807050952.6dbb3803 |
| Red Hat Enterprise Linux 9 | Versions not published |
Show the 3 other branches Hide the 3 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 9.2 Extended Update Support | Versions not published | |
| Red Hat Enterprise Linux 10 | Versions not published | |
| Red Hat Enterprise Linux 6 | Versions not published |
References
- RHSA-2024:4633 access.redhat.com
- RHSA-2024:4997 access.redhat.com
- RHSA-2024:5192 access.redhat.com
- RHSA-2024:5690 access.redhat.com
- RHSA-2024:6153 access.redhat.com
- RHSA-2024:6568 access.redhat.com
- RHSA-2024:6569 access.redhat.com
- RHSA-2024:6576 access.redhat.com
- RHSA-2024:7458 access.redhat.com
- RHSA-2025:1632 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2292104 bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of Red Hat Directory Server 11.5 E4S for RHEL 8
The 16 CVEs of Red Hat Directory Server 11.5 E4S for RHEL 8 →
CVE-2026-19843
389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor
8.4
High
CVE-2026-18922
A flaw was found in 389 Directory Server
9.8
Critical
CVE-2026-18453
389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search
7.5
High
CVE-2026-18355
389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet()
7.5
High