(RHSA-2024:5192) Moderate: 389-ds-base security update

2024-08-1200:56:22

access.redhat.com

389 directory server

ldapv3

security update

denial of service

cve-2024-5953

cve-2024-6237

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

31.0%

JSON

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)
389-ds-base: unauthenticated user can trigger a DoS by sending a specific extended search request (CVE-2024-6237)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9ppc64le389-ds-base-debuginfo< 2.4.5-9.el9_4389-ds-base-debuginfo-2.4.5-9.el9_4.ppc64le.rpm
RedHat9ppc64le389-ds-base-libs-debuginfo< 2.4.5-9.el9_4389-ds-base-libs-debuginfo-2.4.5-9.el9_4.ppc64le.rpm
RedHat9s390x389-ds-base-libs-debuginfo< 2.4.5-9.el9_4389-ds-base-libs-debuginfo-2.4.5-9.el9_4.s390x.rpm
RedHat9s390x389-ds-base< 2.4.5-9.el9_4389-ds-base-2.4.5-9.el9_4.s390x.rpm
RedHat9ppc64le389-ds-base< 2.4.5-9.el9_4389-ds-base-2.4.5-9.el9_4.ppc64le.rpm
RedHat9x86_64389-ds-base-libs< 2.4.5-9.el9_4389-ds-base-libs-2.4.5-9.el9_4.x86_64.rpm
RedHat9s390x389-ds-base-libs< 2.4.5-9.el9_4389-ds-base-libs-2.4.5-9.el9_4.s390x.rpm
RedHat9s390x389-ds-base-devel< 2.4.5-9.el9_4389-ds-base-devel-2.4.5-9.el9_4.s390x.rpm
RedHat9ppc64le389-ds-base-devel< 2.4.5-9.el9_4389-ds-base-devel-2.4.5-9.el9_4.ppc64le.rpm
RedHat9x86_64389-ds-base< 2.4.5-9.el9_4389-ds-base-2.4.5-9.el9_4.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	ppc64le	389-ds-base-debuginfo	< 2.4.5-9.el9_4	389-ds-base-debuginfo-2.4.5-9.el9_4.ppc64le.rpm
RedHat	9	ppc64le	389-ds-base-libs-debuginfo	< 2.4.5-9.el9_4	389-ds-base-libs-debuginfo-2.4.5-9.el9_4.ppc64le.rpm
RedHat	9	s390x	389-ds-base-libs-debuginfo	< 2.4.5-9.el9_4	389-ds-base-libs-debuginfo-2.4.5-9.el9_4.s390x.rpm
RedHat	9	s390x	389-ds-base	< 2.4.5-9.el9_4	389-ds-base-2.4.5-9.el9_4.s390x.rpm
RedHat	9	ppc64le	389-ds-base	< 2.4.5-9.el9_4	389-ds-base-2.4.5-9.el9_4.ppc64le.rpm
RedHat	9	x86_64	389-ds-base-libs	< 2.4.5-9.el9_4	389-ds-base-libs-2.4.5-9.el9_4.x86_64.rpm
RedHat	9	s390x	389-ds-base-libs	< 2.4.5-9.el9_4	389-ds-base-libs-2.4.5-9.el9_4.s390x.rpm
RedHat	9	s390x	389-ds-base-devel	< 2.4.5-9.el9_4	389-ds-base-devel-2.4.5-9.el9_4.s390x.rpm
RedHat	9	ppc64le	389-ds-base-devel	< 2.4.5-9.el9_4	389-ds-base-devel-2.4.5-9.el9_4.ppc64le.rpm
RedHat	9	x86_64	389-ds-base	< 2.4.5-9.el9_4	389-ds-base-2.4.5-9.el9_4.x86_64.rpm