Lucene search
HistorySep 05, 2024 - 3:15 p.m.
CVE-2024-8445
389-ds-base
authenticated user
server crash
userpassword
malformed input
CVSS3
5.7
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0
Percentile
13.7%
The fix for CVE-2024-2199 in 389-ds-base was insufficient to cover all scenarios. In certain product versions, an authenticated user may cause a server crash while modifying userPassword using malformed input.
Related
vulnrichment
vulnrichment
debiancve
debiancve
CVE-2024-8445
2024-09-05 15:15:16
CVE-2024-2199
2024-05-28 12:15:08
redhatcve
redhatcve
CVE-2024-8445
2024-09-05 00:41:55
CVE-2024-2199
2024-05-28 12:03:21
cve
cve
CVE-2024-8445
2024-09-05 15:15:16
CVE-2024-2199
2024-05-28 12:15:08
cvelist
cvelist
redos
redos
ROS-20240806-18
2024-08-06 00:00:00
osv
osv
CVE-2024-2199
2024-05-28 12:15:00
Important: 389-ds-base security update
2024-06-11 00:00:00
Important: 389-ds security update
2024-07-02 00:00:00
nvd
nvd
CVE-2024-2199
2024-05-28 12:15:08
ubuntucve
ubuntucve
CVE-2024-2199
2024-05-28 00:00:00
almalinux
almalinux
Important: 389-ds-base security update
2024-06-11 00:00:00
Important: 389-ds security update
2024-07-02 00:00:00
redhat
redhat
(RHSA-2024:3837) Important: 389-ds-base security update
2024-06-11 18:27:30
(RHSA-2024:4210) Important: redhat-ds:11 security update
2024-07-02 00:08:14
(RHSA-2024:4092) Important: redhat-ds:12 security, bug fix update
2024-06-25 11:09:20
oraclelinux
oraclelinux
389-ds security update
2024-07-03 00:00:00
389-ds-base security update
2024-06-04 00:00:00
389-ds-base security update
2024-06-12 00:00:00
nessus
nessus
Rocky Linux 8 : 389-ds (RLSA-2024:4235)
2024-07-15 00:00:00
RHEL 7 : 389-ds-base (RHSA-2024:3591)
2024-06-04 00:00:00
Oracle Linux 8 : 389-ds (ELSA-2024-4235)
2024-07-03 00:00:00
rocky
rocky
389-ds-base security update
2024-06-14 14:00:35
389-ds security update
2024-07-15 12:17:49
openvas
openvas
openSUSE: Security Advisory for 389 (SUSE-SU-2024:3082-1)
2024-09-04 00:00:00
Fedora: Security Advisory (FEDORA-2024-c8290315df)
2024-08-16 00:00:00
Fedora: Security Advisory (FEDORA-2024-ac07913be8)
2024-08-15 00:00:00
fedora
fedora
[SECURITY] Fedora 40 Update: 389-ds-base-3.0.4-2.fc40
2024-08-15 02:34:18
[SECURITY] Fedora 39 Update: 389-ds-base-2.4.6-1.fc39
2024-08-15 14:23:11
CVSS3
5.7
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0
Percentile
13.7%
Related for NVD:CVE-2024-8445