Vulnerability-Lookup - Search a vulnerability

Vulnerabilites related to Red Hat - Red Hat Directory Server 11.8 for RHEL 8

cve-2024-1062

Vulnerability from cvelistv5

Published

2024-02-12 13:04

Modified

2025-02-18 10:16

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Summary

A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2024:1074	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:1372	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:3047	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:4209	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:4633	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:5690	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:7458	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:1632	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/security/cve/CVE-2024-1062	vdb-entry, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2256711
	https://bugzilla.redhat.com/show_bug.cgi?id=2261879	issue-tracking, x_refsource_REDHAT

Impacted products

Vendor

Product

Version

▼

Version: 1.4.3.0 ≤

Red Hat	Red Hat Directory Server 11.5 E4S for RHEL 8	Unaffected: 8060020250210084424.0ca98e7e < * cpe:/a:redhat:directory_server_e4s:11.5::el8
Red Hat	Red Hat Directory Server 11.7 for RHEL 8	Unaffected: 8080020240306153507.f969626e < * cpe:/a:redhat:directory_server:11.7::el8
Red Hat	Red Hat Directory Server 11.8 for RHEL 8	Unaffected: 8090020240606122459.91529cd0 < * cpe:/a:redhat:directory_server:11.8::el8
Red Hat	Red Hat Directory Server 12.2 EUS for RHEL 9	Unaffected: 9020020240916150035.1674d574 < * cpe:/a:redhat:directory_server_eus:12.2::el9
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020240315011748.945b6f6d < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support	Unaffected: 8060020240213164457.824efc52 < * cpe:/a:redhat:rhel_eus:8.6::appstream
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	Unaffected: 8080020240807050952.6dbb3803 < * cpe:/a:redhat:rhel_eus:8.8::appstream
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	Unaffected: 0:2.2.4-9.el9_2 < * cpe:/a:redhat:rhel_eus:9.2::appstream
Red Hat	Red Hat Directory Server 12	cpe:/a:redhat:directory_server:12
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-1062",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-02-22T18:08:45.921597Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-07-05T17:21:57.500Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-01T18:26:30.502Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2024:1074",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2024:1074",
               },
               {
                  name: "RHSA-2024:1372",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2024:1372",
               },
               {
                  name: "RHSA-2024:3047",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2024:3047",
               },
               {
                  name: "RHSA-2024:4209",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2024:4209",
               },
               {
                  name: "RHSA-2024:4633",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2024:4633",
               },
               {
                  tags: [
                     "vdb-entry",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/security/cve/CVE-2024-1062",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=2256711",
               },
               {
                  name: "RHBZ#2261879",
                  tags: [
                     "issue-tracking",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=2261879",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               collectionURL: "https://github.com/389ds/389-ds-base/",
               defaultStatus: "unaffected",
               packageName: "389-ds-base",
               versions: [
                  {
                     lessThan: "2.2.*",
                     status: "affected",
                     version: "1.4.3.0",
                     versionType: "semver",
                  },
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "2.3.0",
                     versionType: "semver",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:directory_server_e4s:11.5::el8",
               ],
               defaultStatus: "affected",
               packageName: "redhat-ds:11",
               product: "Red Hat Directory Server 11.5 E4S for RHEL 8",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "8060020250210084424.0ca98e7e",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:directory_server:11.7::el8",
               ],
               defaultStatus: "affected",
               packageName: "redhat-ds:11",
               product: "Red Hat Directory Server 11.7 for RHEL 8",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "8080020240306153507.f969626e",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:directory_server:11.8::el8",
               ],
               defaultStatus: "affected",
               packageName: "redhat-ds:11",
               product: "Red Hat Directory Server 11.8 for RHEL 8",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "8090020240606122459.91529cd0",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:directory_server_eus:12.2::el9",
               ],
               defaultStatus: "affected",
               packageName: "redhat-ds:12",
               product: "Red Hat Directory Server 12.2 EUS for RHEL 9",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "9020020240916150035.1674d574",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:enterprise_linux:8::appstream",
               ],
               defaultStatus: "affected",
               packageName: "389-ds:1.4",
               product: "Red Hat Enterprise Linux 8",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "8100020240315011748.945b6f6d",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:rhel_eus:8.6::appstream",
               ],
               defaultStatus: "affected",
               packageName: "389-ds:1.4",
               product: "Red Hat Enterprise Linux 8.6 Extended Update Support",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "8060020240213164457.824efc52",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:rhel_eus:8.8::appstream",
               ],
               defaultStatus: "affected",
               packageName: "389-ds:1.4",
               product: "Red Hat Enterprise Linux 8.8 Extended Update Support",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "8080020240807050952.6dbb3803",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:rhel_eus:9.2::appstream",
               ],
               defaultStatus: "affected",
               packageName: "389-ds-base",
               product: "Red Hat Enterprise Linux 9.2 Extended Update Support",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "0:2.2.4-9.el9_2",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:directory_server:12",
               ],
               defaultStatus: "affected",
               packageName: "redhat-ds:12/389-ds-base",
               product: "Red Hat Directory Server 12",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:6",
               ],
               defaultStatus: "unknown",
               packageName: "389-ds-base",
               product: "Red Hat Enterprise Linux 6",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:7",
               ],
               defaultStatus: "unknown",
               packageName: "389-ds-base",
               product: "Red Hat Enterprise Linux 7",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:9",
               ],
               defaultStatus: "affected",
               packageName: "389-ds-base",
               product: "Red Hat Enterprise Linux 9",
               vendor: "Red Hat",
            },
         ],
         datePublic: "2024-01-30T00:00:00.000Z",
         descriptions: [
            {
               lang: "en",
               value: "A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.",
            },
         ],
         metrics: [
            {
               other: {
                  content: {
                     namespace: "https://access.redhat.com/security/updates/classification/",
                     value: "Moderate",
                  },
                  type: "Red Hat severity rating",
               },
            },
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "HIGH",
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               format: "CVSS",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-122",
                     description: "Heap-based Buffer Overflow",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-02-18T10:16:21.188Z",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "RHSA-2024:1074",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:1074",
            },
            {
               name: "RHSA-2024:1372",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:1372",
            },
            {
               name: "RHSA-2024:3047",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:3047",
            },
            {
               name: "RHSA-2024:4209",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:4209",
            },
            {
               name: "RHSA-2024:4633",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:4633",
            },
            {
               name: "RHSA-2024:5690",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:5690",
            },
            {
               name: "RHSA-2024:7458",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:7458",
            },
            {
               name: "RHSA-2025:1632",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2025:1632",
            },
            {
               tags: [
                  "vdb-entry",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/security/cve/CVE-2024-1062",
            },
            {
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2256711",
            },
            {
               name: "RHBZ#2261879",
               tags: [
                  "issue-tracking",
                  "x_refsource_REDHAT",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2261879",
            },
         ],
         timeline: [
            {
               lang: "en",
               time: "2024-01-30T00:00:00+00:00",
               value: "Reported to Red Hat.",
            },
            {
               lang: "en",
               time: "2024-01-30T00:00:00+00:00",
               value: "Made public.",
            },
         ],
         title: "389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)",
         workarounds: [
            {
               lang: "en",
               value: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
            },
         ],
         x_redhatCweChain: "CWE-122: Heap-based Buffer Overflow",
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2024-1062",
      datePublished: "2024-02-12T13:04:39.944Z",
      dateReserved: "2024-01-30T08:40:08.731Z",
      dateUpdated: "2025-02-18T10:16:21.188Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-3657

Vulnerability from cvelistv5

Published

2024-05-28 12:53

Modified

2025-02-18 10:16

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2024:3591	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:3837	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:4092	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:4209	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:4210	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:4235	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:4633	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:5690	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:6576	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:7458	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:1632	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/security/cve/CVE-2024-3657	vdb-entry, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2274401	issue-tracking, x_refsource_REDHAT

Impacted products

Vendor

Product

Version

▼

Red Hat

Red Hat Directory Server 11.5 E4S for RHEL 8

Unaffected: 8060020250210084424.0ca98e7e < *
cpe:/a:redhat:directory_server_e4s:11.5::el8

Red Hat	Red Hat Directory Server 11.7 for RHEL 8	Unaffected: 8080020240909040333.f969626e < * cpe:/a:redhat:directory_server:11.7::el8
Red Hat	Red Hat Directory Server 11.8 for RHEL 8	Unaffected: 8090020240606122459.91529cd0 < * cpe:/a:redhat:directory_server:11.8::el8
Red Hat	Red Hat Directory Server 11.9 for RHEL 8	Unaffected: 8100020240604161237.37ed7c03 < * cpe:/a:redhat:directory_server:11.9::el8
Red Hat	Red Hat Directory Server 12.2 EUS for RHEL 9	Unaffected: 9020020240916150035.1674d574 < * cpe:/a:redhat:directory_server_eus:12.2::el9
Red Hat	Red Hat Directory Server 12.4 for RHEL 9	Unaffected: 9040020240604143706.1674d574 < * cpe:/a:redhat:directory_server:12.4::el9
Red Hat	Red Hat Enterprise Linux 7	Unaffected: 0:1.3.11.1-5.el7_9 < * cpe:/o:redhat:enterprise_linux:7::server cpe:/o:redhat:enterprise_linux:7::workstation cpe:/o:redhat:enterprise_linux:7::client cpe:/o:redhat:enterprise_linux:7::computenode
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020240613122040.25e700aa < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	Unaffected: 8080020240807050952.6dbb3803 < * cpe:/a:redhat:rhel_eus:8.8::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:2.4.5-8.el9_4 < * cpe:/a:redhat:enterprise_linux:9::crb cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	Unaffected: 0:2.2.4-9.el9_2 < * cpe:/a:redhat:rhel_eus:9.2::appstream
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-3657",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-06-05T20:48:33.613730Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-06-05T20:49:13.347Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-01T20:20:00.332Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2024:3591",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2024:3591",
               },
               {
                  name: "RHSA-2024:3837",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2024:3837",
               },
               {
                  name: "RHSA-2024:4092",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2024:4092",
               },
               {
                  name: "RHSA-2024:4209",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2024:4209",
               },
               {
                  name: "RHSA-2024:4210",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2024:4210",
               },
               {
                  name: "RHSA-2024:4235",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2024:4235",
               },
               {
                  name: "RHSA-2024:4633",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2024:4633",
               },
               {
                  tags: [
                     "vdb-entry",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/security/cve/CVE-2024-3657",
               },
               {
                  name: "RHBZ#2274401",
                  tags: [
                     "issue-tracking",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=2274401",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:directory_server_e4s:11.5::el8",
               ],
               defaultStatus: "affected",
               packageName: "redhat-ds:11",
               product: "Red Hat Directory Server 11.5 E4S for RHEL 8",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "8060020250210084424.0ca98e7e",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:directory_server:11.7::el8",
               ],
               defaultStatus: "affected",
               packageName: "redhat-ds:11",
               product: "Red Hat Directory Server 11.7 for RHEL 8",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "8080020240909040333.f969626e",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:directory_server:11.8::el8",
               ],
               defaultStatus: "affected",
               packageName: "redhat-ds:11",
               product: "Red Hat Directory Server 11.8 for RHEL 8",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "8090020240606122459.91529cd0",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:directory_server:11.9::el8",
               ],
               defaultStatus: "affected",
               packageName: "redhat-ds:11",
               product: "Red Hat Directory Server 11.9 for RHEL 8",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "8100020240604161237.37ed7c03",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:directory_server_eus:12.2::el9",
               ],
               defaultStatus: "affected",
               packageName: "redhat-ds:12",
               product: "Red Hat Directory Server 12.2 EUS for RHEL 9",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "9020020240916150035.1674d574",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:directory_server:12.4::el9",
               ],
               defaultStatus: "affected",
               packageName: "redhat-ds:12",
               product: "Red Hat Directory Server 12.4 for RHEL 9",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "9040020240604143706.1674d574",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:7::server",
                  "cpe:/o:redhat:enterprise_linux:7::workstation",
                  "cpe:/o:redhat:enterprise_linux:7::client",
                  "cpe:/o:redhat:enterprise_linux:7::computenode",
               ],
               defaultStatus: "affected",
               packageName: "389-ds-base",
               product: "Red Hat Enterprise Linux 7",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "0:1.3.11.1-5.el7_9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:enterprise_linux:8::appstream",
               ],
               defaultStatus: "affected",
               packageName: "389-ds:1.4",
               product: "Red Hat Enterprise Linux 8",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "8100020240613122040.25e700aa",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:rhel_eus:8.8::appstream",
               ],
               defaultStatus: "affected",
               packageName: "389-ds:1.4",
               product: "Red Hat Enterprise Linux 8.8 Extended Update Support",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "8080020240807050952.6dbb3803",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:enterprise_linux:9::crb",
                  "cpe:/a:redhat:enterprise_linux:9::appstream",
               ],
               defaultStatus: "affected",
               packageName: "389-ds-base",
               product: "Red Hat Enterprise Linux 9",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "0:2.4.5-8.el9_4",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:rhel_eus:9.2::appstream",
               ],
               defaultStatus: "affected",
               packageName: "389-ds-base",
               product: "Red Hat Enterprise Linux 9.2 Extended Update Support",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "0:2.2.4-9.el9_2",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:6",
               ],
               defaultStatus: "unknown",
               packageName: "389-ds-base",
               product: "Red Hat Enterprise Linux 6",
               vendor: "Red Hat",
            },
         ],
         datePublic: "2024-05-28T00:00:00.000Z",
         descriptions: [
            {
               lang: "en",
               value: "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
            },
         ],
         metrics: [
            {
               other: {
                  content: {
                     namespace: "https://access.redhat.com/security/updates/classification/",
                     value: "Important",
                  },
                  type: "Red Hat severity rating",
               },
            },
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               format: "CVSS",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-20",
                     description: "Improper Input Validation",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-02-18T10:16:12.767Z",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "RHSA-2024:3591",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:3591",
            },
            {
               name: "RHSA-2024:3837",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:3837",
            },
            {
               name: "RHSA-2024:4092",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:4092",
            },
            {
               name: "RHSA-2024:4209",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:4209",
            },
            {
               name: "RHSA-2024:4210",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:4210",
            },
            {
               name: "RHSA-2024:4235",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:4235",
            },
            {
               name: "RHSA-2024:4633",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:4633",
            },
            {
               name: "RHSA-2024:5690",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:5690",
            },
            {
               name: "RHSA-2024:6576",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:6576",
            },
            {
               name: "RHSA-2024:7458",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:7458",
            },
            {
               name: "RHSA-2025:1632",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2025:1632",
            },
            {
               tags: [
                  "vdb-entry",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/security/cve/CVE-2024-3657",
            },
            {
               name: "RHBZ#2274401",
               tags: [
                  "issue-tracking",
                  "x_refsource_REDHAT",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2274401",
            },
         ],
         timeline: [
            {
               lang: "en",
               time: "2024-04-10T00:00:00+00:00",
               value: "Reported to Red Hat.",
            },
            {
               lang: "en",
               time: "2024-05-28T00:00:00+00:00",
               value: "Made public.",
            },
         ],
         title: "389-ds-base: potential denial of service via specially crafted kerberos as-req request",
         workarounds: [
            {
               lang: "en",
               value: "Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
            },
         ],
         x_redhatCweChain: "CWE-20: Improper Input Validation",
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2024-3657",
      datePublished: "2024-05-28T12:53:03.399Z",
      dateReserved: "2024-04-11T14:21:25.571Z",
      dateUpdated: "2025-02-18T10:16:12.767Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-2199

Vulnerability from cvelistv5

Published

2024-05-28 12:04

Modified

2025-02-18 10:16

Severity ?

5.7 (Medium) - CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Summary

A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2024:3591	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:3837	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:4092	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:4209	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:4210	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:4235	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:4633	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:5690	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:1632	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/security/cve/CVE-2024-2199	vdb-entry, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2267976	issue-tracking, x_refsource_REDHAT

Impacted products

Vendor

Product

Version

▼

Version: 0 ≤

Red Hat	Red Hat Directory Server 11.5 E4S for RHEL 8	Unaffected: 8060020250210084424.0ca98e7e < * cpe:/a:redhat:directory_server_e4s:11.5::el8
Red Hat	Red Hat Directory Server 11.8 for RHEL 8	Unaffected: 8090020240606122459.91529cd0 < * cpe:/a:redhat:directory_server:11.8::el8
Red Hat	Red Hat Directory Server 11.9 for RHEL 8	Unaffected: 8100020240604161237.37ed7c03 < * cpe:/a:redhat:directory_server:11.9::el8
Red Hat	Red Hat Directory Server 12.4 for RHEL 9	Unaffected: 9040020240604143706.1674d574 < * cpe:/a:redhat:directory_server:12.4::el9
Red Hat	Red Hat Enterprise Linux 7	Unaffected: 0:1.3.11.1-5.el7_9 < * cpe:/o:redhat:enterprise_linux:7::server cpe:/o:redhat:enterprise_linux:7::workstation cpe:/o:redhat:enterprise_linux:7::client cpe:/o:redhat:enterprise_linux:7::computenode
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020240613122040.25e700aa < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	Unaffected: 8080020240807050952.6dbb3803 < * cpe:/a:redhat:rhel_eus:8.8::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:2.4.5-8.el9_4 < * cpe:/a:redhat:enterprise_linux:9::crb cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	Unaffected: 0:2.2.4-9.el9_2 < * cpe:/a:redhat:rhel_eus:9.2::appstream
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-2199",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-05-28T15:52:25.507062Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-06-04T17:30:35.441Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-01T19:03:39.378Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2024:3591",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2024:3591",
               },
               {
                  name: "RHSA-2024:3837",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2024:3837",
               },
               {
                  name: "RHSA-2024:4092",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2024:4092",
               },
               {
                  name: "RHSA-2024:4209",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2024:4209",
               },
               {
                  name: "RHSA-2024:4210",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2024:4210",
               },
               {
                  name: "RHSA-2024:4235",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2024:4235",
               },
               {
                  name: "RHSA-2024:4633",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2024:4633",
               },
               {
                  tags: [
                     "vdb-entry",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/security/cve/CVE-2024-2199",
               },
               {
                  name: "RHBZ#2267976",
                  tags: [
                     "issue-tracking",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=2267976",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               collectionURL: "https://github.com/389ds/389-ds-base",
               defaultStatus: "unaffected",
               packageName: "389-ds-base",
               versions: [
                  {
                     lessThan: "3.1.1",
                     status: "affected",
                     version: "0",
                     versionType: "semver",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:directory_server_e4s:11.5::el8",
               ],
               defaultStatus: "affected",
               packageName: "redhat-ds:11",
               product: "Red Hat Directory Server 11.5 E4S for RHEL 8",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "8060020250210084424.0ca98e7e",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:directory_server:11.8::el8",
               ],
               defaultStatus: "affected",
               packageName: "redhat-ds:11",
               product: "Red Hat Directory Server 11.8 for RHEL 8",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "8090020240606122459.91529cd0",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:directory_server:11.9::el8",
               ],
               defaultStatus: "affected",
               packageName: "redhat-ds:11",
               product: "Red Hat Directory Server 11.9 for RHEL 8",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "8100020240604161237.37ed7c03",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:directory_server:12.4::el9",
               ],
               defaultStatus: "affected",
               packageName: "redhat-ds:12",
               product: "Red Hat Directory Server 12.4 for RHEL 9",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "9040020240604143706.1674d574",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:7::server",
                  "cpe:/o:redhat:enterprise_linux:7::workstation",
                  "cpe:/o:redhat:enterprise_linux:7::client",
                  "cpe:/o:redhat:enterprise_linux:7::computenode",
               ],
               defaultStatus: "affected",
               packageName: "389-ds-base",
               product: "Red Hat Enterprise Linux 7",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "0:1.3.11.1-5.el7_9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:enterprise_linux:8::appstream",
               ],
               defaultStatus: "affected",
               packageName: "389-ds:1.4",
               product: "Red Hat Enterprise Linux 8",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "8100020240613122040.25e700aa",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:rhel_eus:8.8::appstream",
               ],
               defaultStatus: "affected",
               packageName: "389-ds:1.4",
               product: "Red Hat Enterprise Linux 8.8 Extended Update Support",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "8080020240807050952.6dbb3803",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:enterprise_linux:9::crb",
                  "cpe:/a:redhat:enterprise_linux:9::appstream",
               ],
               defaultStatus: "affected",
               packageName: "389-ds-base",
               product: "Red Hat Enterprise Linux 9",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "0:2.4.5-8.el9_4",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:rhel_eus:9.2::appstream",
               ],
               defaultStatus: "affected",
               packageName: "389-ds-base",
               product: "Red Hat Enterprise Linux 9.2 Extended Update Support",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "0:2.2.4-9.el9_2",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:6",
               ],
               defaultStatus: "unknown",
               packageName: "389-ds-base",
               product: "Red Hat Enterprise Linux 6",
               vendor: "Red Hat",
            },
         ],
         datePublic: "2024-05-28T00:00:00.000Z",
         descriptions: [
            {
               lang: "en",
               value: "A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.",
            },
         ],
         metrics: [
            {
               other: {
                  content: {
                     namespace: "https://access.redhat.com/security/updates/classification/",
                     value: "Moderate",
                  },
                  type: "Red Hat severity rating",
               },
            },
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "ADJACENT_NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 5.7,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               format: "CVSS",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-20",
                     description: "Improper Input Validation",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-02-18T10:16:28.818Z",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "RHSA-2024:3591",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:3591",
            },
            {
               name: "RHSA-2024:3837",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:3837",
            },
            {
               name: "RHSA-2024:4092",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:4092",
            },
            {
               name: "RHSA-2024:4209",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:4209",
            },
            {
               name: "RHSA-2024:4210",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:4210",
            },
            {
               name: "RHSA-2024:4235",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:4235",
            },
            {
               name: "RHSA-2024:4633",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:4633",
            },
            {
               name: "RHSA-2024:5690",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:5690",
            },
            {
               name: "RHSA-2025:1632",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2025:1632",
            },
            {
               tags: [
                  "vdb-entry",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/security/cve/CVE-2024-2199",
            },
            {
               name: "RHBZ#2267976",
               tags: [
                  "issue-tracking",
                  "x_refsource_REDHAT",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2267976",
            },
         ],
         timeline: [
            {
               lang: "en",
               time: "2024-03-05T00:00:00+00:00",
               value: "Reported to Red Hat.",
            },
            {
               lang: "en",
               time: "2024-05-28T00:00:00+00:00",
               value: "Made public.",
            },
         ],
         title: "389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c",
         workarounds: [
            {
               lang: "en",
               value: "Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
            },
         ],
         x_redhatCweChain: "CWE-20: Improper Input Validation",
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2024-2199",
      datePublished: "2024-05-28T12:04:07.401Z",
      dateReserved: "2024-03-05T18:54:52.210Z",
      dateUpdated: "2025-02-18T10:16:28.818Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}