5.7
Moyenne
CVE-2024-5953 A denial of service vulnerability was found in the 389-ds-base LDAP server
Description
A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Directory Server 11.5 E4S for RHEL 8 8060020250210084424.0 | premières → < 8060020250210084424.0ca98e7e | 8060020250210084424.0ca98e7e |
| Red Hat Directory Server 11.7 for RHEL 8 8080020240909040333 | premières → < 8080020240909040333.f969626e | 8080020240909040333.f969626e |
| Red Hat Directory Server 11.9 for RHEL 8 8100020240902112955.37 | premières → < 8100020240902112955.37ed7c03 | 8100020240902112955.37ed7c03 |
| Red Hat Directory Server 12.2 EUS for RHEL 9 9020020240916150035.1674 | premières → < 9020020240916150035.1674d574 | 9020020240916150035.1674d574 |
| Red Hat Directory Server 12.4 for RHEL 9 9040020240723122852.1674 | premières → < 9040020240723122852.1674d574 | 9040020240723122852.1674d574 |
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | Versions non publiées | |
| Red Hat Enterprise Linux 8 8100020240910065753.25 | premières → < 8100020240910065753.25e700aa | 8100020240910065753.25e700aa |
| Red Hat Enterprise Linux 8.8 Extended Update Support 8080020240807050952.6 | premières → < 8080020240807050952.6dbb3803 | 8080020240807050952.6dbb3803 |
| Red Hat Enterprise Linux 9 | Versions non publiées |
Afficher les 3 autres branches Masquer les 3 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Enterprise Linux 9.2 Extended Update Support | Versions non publiées | |
| Red Hat Enterprise Linux 10 | Versions non publiées | |
| Red Hat Enterprise Linux 6 | Versions non publiées |
Références
- RHSA-2024:4633 access.redhat.com
- RHSA-2024:4997 access.redhat.com
- RHSA-2024:5192 access.redhat.com
- RHSA-2024:5690 access.redhat.com
- RHSA-2024:6153 access.redhat.com
- RHSA-2024:6568 access.redhat.com
- RHSA-2024:6569 access.redhat.com
- RHSA-2024:6576 access.redhat.com
- RHSA-2024:7458 access.redhat.com
- RHSA-2025:1632 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2292104 bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat Directory Server 11.5 E4S for RHEL 8
Les 16 CVE de Red Hat Directory Server 11.5 E4S for RHEL 8 →
CVE-2026-19843
389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor
8.4
Élevée
CVE-2026-18922
A flaw was found in 389 Directory Server
9.8
Critique
CVE-2026-18453
389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search
7.5
Élevée
CVE-2026-18355
389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet()
7.5
Élevée