CVE-2024-3657
High · 7.5CVSS
7.5
EPSS
1.3%
Published
May 28, 2024
CISA due date
—
Cloudanix analysis
Monitor only
SSVC: Track
A bug in the directory service lets anyone on the network send a special request that can knock the service offline until it is restarted.
- Exploitation
- Remote Unauthenticated
- Attacker needs
- None
- Complexity
- Low
- Impact
- Denial Of Service
- Component
- Network Service
- Class
- Denial of service
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
A specially crafted LDAP query triggers a failure condition in the directory server process, resulting in denial of service.
Why it matters to the business
Directory-dependent services such as authentication and identity lookups become unavailable until the server is restarted, causing operational disruption for any systems relying on the directory.
How an attack unfolds
An unauthenticated remote attacker sends a single malicious LDAP query to the directory server; the server processes the query, encounters an unhandled failure condition, and terminates or becomes unresponsive.
How to fix it
Upgrade affected 389-ds-base installations to a version containing the fix; for ovh/the-bastion deployments apply commit 137c7b54540595f557debe3c804f00553119bd60 or later.
How to confirm the fix worked
Confirm the running directory server version is newer than the vulnerable release and test that the crafted LDAP query no longer causes a crash.
Typical attack path
- Identify an exposed 389-ds-base directory server
- Craft a malicious LDAP query that triggers the flaw
- Transmit the query over the network
- Observe server crash or unresponsiveness confirming denial of service
How to detect it
Review directory server logs for unexpected crashes or restarts coinciding with LDAP query processing; correlate with network traffic showing unusual LDAP requests.
What your security team should do
- Apply the vendor-supplied fix or commit immediately given the public availability of the flaw
- Restrict network access to directory servers to trusted clients only
- Monitor for unexpected directory server restarts in system logs
The record
A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:8 | 389-ds-base | 0 | 1.4.3.39-7.module_el8.10.0+3864+d8eec553 |
| AlmaLinux:8 | 389-ds-base-devel | 0 | 1.4.3.39-7.module_el8.10.0+3864+d8eec553 |
| AlmaLinux:8 | 389-ds-base-legacy-tools | 0 | 1.4.3.39-7.module_el8.10.0+3864+d8eec553 |
| AlmaLinux:8 | 389-ds-base-libs | 0 | 1.4.3.39-7.module_el8.10.0+3864+d8eec553 |
| AlmaLinux:8 | 389-ds-base-snmp | 0 | 1.4.3.39-7.module_el8.10.0+3864+d8eec553 |
| AlmaLinux:8 | python3-lib389 | 0 | 1.4.3.39-7.module_el8.10.0+3864+d8eec553 |
| AlmaLinux:9 | 389-ds-base | 0 | 2.4.5-8.el9_4 |
| AlmaLinux:9 | 389-ds-base-devel | 0 | 2.4.5-8.el9_4 |
| AlmaLinux:9 | 389-ds-base-libs | 0 | 2.4.5-8.el9_4 |
| AlmaLinux:9 | python3-lib389 | 0 | 2.4.5-8.el9_4 |
| Debian:11 | 389-ds-base | 0 | No fix |
| Debian:11 | 389-ds-base | 0 | 1.4.4.11-2+deb11u1 |
| Debian:12 | 389-ds-base | 0 | No fix |
| Debian:13 | 389-ds-base | 0 | 3.1.1+dfsg1-1 |
| Red Hat:directory_server:11.7::el8 | 389-ds-base | 0 | 0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c |
| Red Hat:directory_server:11.7::el8 | 389-ds-base-debuginfo | 0 | 0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c |
| Red Hat:directory_server:11.7::el8 | 389-ds-base-debugsource | 0 | 0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c |
| Red Hat:directory_server:11.7::el8 | 389-ds-base-devel | 0 | 0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c |
| Red Hat:directory_server:11.7::el8 | 389-ds-base-legacy-tools | 0 | 0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c |
| Red Hat:directory_server:11.7::el8 | 389-ds-base-legacy-tools-debuginfo | 0 | 0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c |
| Red Hat:directory_server:11.7::el8 | 389-ds-base-libs | 0 | 0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c |
| Red Hat:directory_server:11.7::el8 | 389-ds-base-libs-debuginfo | 0 | 0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c |
| Red Hat:directory_server:11.7::el8 | 389-ds-base-snmp | 0 | 0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c |
| Red Hat:directory_server:11.7::el8 | 389-ds-base-snmp-debuginfo | 0 | 0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c |
| Red Hat:directory_server:11.7::el8 | cockpit-389-ds | 0 | 0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c |
| Red Hat:directory_server:11.7::el8 | python3-lib389 | 0 | 0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c |
| Red Hat:directory_server:11.8::el8 | 389-ds-base | 0 | 0:1.4.3.37-10.module+el8dsrv+21971+f7435891 |
| Red Hat:directory_server:11.8::el8 | 389-ds-base-debuginfo | 0 | 0:1.4.3.37-10.module+el8dsrv+21971+f7435891 |
| Red Hat:directory_server:11.8::el8 | 389-ds-base-debugsource | 0 | 0:1.4.3.37-10.module+el8dsrv+21971+f7435891 |
| Red Hat:directory_server:11.8::el8 | 389-ds-base-devel | 0 | 0:1.4.3.37-10.module+el8dsrv+21971+f7435891 |
| Red Hat:directory_server:11.8::el8 | 389-ds-base-legacy-tools | 0 | 0:1.4.3.37-10.module+el8dsrv+21971+f7435891 |
| Red Hat:directory_server:11.8::el8 | 389-ds-base-legacy-tools-debuginfo | 0 | 0:1.4.3.37-10.module+el8dsrv+21971+f7435891 |
| Red Hat:directory_server:11.8::el8 | 389-ds-base-libs | 0 | 0:1.4.3.37-10.module+el8dsrv+21971+f7435891 |
| Red Hat:directory_server:11.8::el8 | 389-ds-base-libs-debuginfo | 0 | 0:1.4.3.37-10.module+el8dsrv+21971+f7435891 |
| Red Hat:directory_server:11.8::el8 | 389-ds-base-snmp | 0 | 0:1.4.3.37-10.module+el8dsrv+21971+f7435891 |
| Red Hat:directory_server:11.8::el8 | 389-ds-base-snmp-debuginfo | 0 | 0:1.4.3.37-10.module+el8dsrv+21971+f7435891 |
| Red Hat:directory_server:11.8::el8 | cockpit-389-ds | 0 | 0:1.4.3.37-10.module+el8dsrv+21971+f7435891 |
| Red Hat:directory_server:11.8::el8 | python3-lib389 | 0 | 0:1.4.3.37-10.module+el8dsrv+21971+f7435891 |
| Red Hat:directory_server:11.9::el8 | 389-ds-base | 0 | 0:1.4.3.39-4.module+el8dsrv+21965+9ff26197 |
| Red Hat:directory_server:11.9::el8 | 389-ds-base-debuginfo | 0 | 0:1.4.3.39-4.module+el8dsrv+21965+9ff26197 |
| Red Hat:directory_server:11.9::el8 | 389-ds-base-debugsource | 0 | 0:1.4.3.39-4.module+el8dsrv+21965+9ff26197 |
| Red Hat:directory_server:11.9::el8 | 389-ds-base-devel | 0 | 0:1.4.3.39-4.module+el8dsrv+21965+9ff26197 |
| Red Hat:directory_server:11.9::el8 | 389-ds-base-legacy-tools | 0 | 0:1.4.3.39-4.module+el8dsrv+21965+9ff26197 |
| Red Hat:directory_server:11.9::el8 | 389-ds-base-legacy-tools-debuginfo | 0 | 0:1.4.3.39-4.module+el8dsrv+21965+9ff26197 |
| Red Hat:directory_server:11.9::el8 | 389-ds-base-libs | 0 | 0:1.4.3.39-4.module+el8dsrv+21965+9ff26197 |
| Red Hat:directory_server:11.9::el8 | 389-ds-base-libs-debuginfo | 0 | 0:1.4.3.39-4.module+el8dsrv+21965+9ff26197 |
| Red Hat:directory_server:11.9::el8 | 389-ds-base-snmp | 0 | 0:1.4.3.39-4.module+el8dsrv+21965+9ff26197 |
| Red Hat:directory_server:11.9::el8 | 389-ds-base-snmp-debuginfo | 0 | 0:1.4.3.39-4.module+el8dsrv+21965+9ff26197 |
| Red Hat:directory_server:11.9::el8 | cockpit-389-ds | 0 | 0:1.4.3.39-4.module+el8dsrv+21965+9ff26197 |
| Red Hat:directory_server:11.9::el8 | python3-lib389 | 0 | 0:1.4.3.39-4.module+el8dsrv+21965+9ff26197 |
| Red Hat:directory_server:12.4::el9 | 389-ds-base | 0 | 0:2.4.5-4.module+el9dsrv+21964+c7e95493 |
| Red Hat:directory_server:12.4::el9 | 389-ds-base-debuginfo | 0 | 0:2.4.5-4.module+el9dsrv+21964+c7e95493 |
| Red Hat:directory_server:12.4::el9 | 389-ds-base-debugsource | 0 | 0:2.4.5-4.module+el9dsrv+21964+c7e95493 |
| Red Hat:directory_server:12.4::el9 | 389-ds-base-devel | 0 | 0:2.4.5-4.module+el9dsrv+21964+c7e95493 |
| Red Hat:directory_server:12.4::el9 | 389-ds-base-libs | 0 | 0:2.4.5-4.module+el9dsrv+21964+c7e95493 |
| Red Hat:directory_server:12.4::el9 | 389-ds-base-libs-debuginfo | 0 | 0:2.4.5-4.module+el9dsrv+21964+c7e95493 |
| Red Hat:directory_server:12.4::el9 | 389-ds-base-snmp | 0 | 0:2.4.5-4.module+el9dsrv+21964+c7e95493 |
| Red Hat:directory_server:12.4::el9 | 389-ds-base-snmp-debuginfo | 0 | 0:2.4.5-4.module+el9dsrv+21964+c7e95493 |
| Red Hat:directory_server:12.4::el9 | cockpit-389-ds | 0 | 0:2.4.5-4.module+el9dsrv+21964+c7e95493 |
| Red Hat:directory_server:12.4::el9 | python3-lib389 | 0 | 0:2.4.5-4.module+el9dsrv+21964+c7e95493 |
| Red Hat:directory_server_eus:12.2::el9 | 389-ds-base | 0 | 0:2.2.7-6.module+el9dsrv+22320+37c894f3 |
| Red Hat:directory_server_eus:12.2::el9 | 389-ds-base-debuginfo | 0 | 0:2.2.7-6.module+el9dsrv+22320+37c894f3 |
| Red Hat:directory_server_eus:12.2::el9 | 389-ds-base-debugsource | 0 | 0:2.2.7-6.module+el9dsrv+22320+37c894f3 |
| Red Hat:directory_server_eus:12.2::el9 | 389-ds-base-devel | 0 | 0:2.2.7-6.module+el9dsrv+22320+37c894f3 |
| Red Hat:directory_server_eus:12.2::el9 | 389-ds-base-libs | 0 | 0:2.2.7-6.module+el9dsrv+22320+37c894f3 |
| Red Hat:directory_server_eus:12.2::el9 | 389-ds-base-libs-debuginfo | 0 | 0:2.2.7-6.module+el9dsrv+22320+37c894f3 |
| Red Hat:directory_server_eus:12.2::el9 | 389-ds-base-snmp | 0 | 0:2.2.7-6.module+el9dsrv+22320+37c894f3 |
| Red Hat:directory_server_eus:12.2::el9 | 389-ds-base-snmp-debuginfo | 0 | 0:2.2.7-6.module+el9dsrv+22320+37c894f3 |
| Red Hat:directory_server_eus:12.2::el9 | cockpit-389-ds | 0 | 0:2.2.7-6.module+el9dsrv+22320+37c894f3 |
| Red Hat:directory_server_eus:12.2::el9 | python3-lib389 | 0 | 0:2.2.7-6.module+el9dsrv+22320+37c894f3 |
| Red Hat:enterprise_linux:7::client | 389-ds-base | 0 | 0:1.3.11.1-5.el7_9 |
| Red Hat:enterprise_linux:7::client | 389-ds-base-debuginfo | 0 | 0:1.3.11.1-5.el7_9 |
| Red Hat:enterprise_linux:7::client | 389-ds-base-devel | 0 | 0:1.3.11.1-5.el7_9 |
| Red Hat:enterprise_linux:7::client | 389-ds-base-libs | 0 | 0:1.3.11.1-5.el7_9 |
| Red Hat:enterprise_linux:7::client | 389-ds-base-snmp | 0 | 0:1.3.11.1-5.el7_9 |
| Red Hat:enterprise_linux:7::computenode | 389-ds-base | 0 | 0:1.3.11.1-5.el7_9 |
| Red Hat:enterprise_linux:7::computenode | 389-ds-base-debuginfo | 0 | 0:1.3.11.1-5.el7_9 |
| Red Hat:enterprise_linux:7::computenode | 389-ds-base-devel | 0 | 0:1.3.11.1-5.el7_9 |
| Red Hat:enterprise_linux:7::computenode | 389-ds-base-libs | 0 | 0:1.3.11.1-5.el7_9 |
| Red Hat:enterprise_linux:7::computenode | 389-ds-base-snmp | 0 | 0:1.3.11.1-5.el7_9 |
| Red Hat:enterprise_linux:7::server | 389-ds-base | 0 | 0:1.3.11.1-5.el7_9 |
| Red Hat:enterprise_linux:7::server | 389-ds-base-debuginfo | 0 | 0:1.3.11.1-5.el7_9 |
| Red Hat:enterprise_linux:7::server | 389-ds-base-devel | 0 | 0:1.3.11.1-5.el7_9 |
| Red Hat:enterprise_linux:7::server | 389-ds-base-libs | 0 | 0:1.3.11.1-5.el7_9 |
| Red Hat:enterprise_linux:7::server | 389-ds-base-snmp | 0 | 0:1.3.11.1-5.el7_9 |
| Red Hat:enterprise_linux:7::workstation | 389-ds-base | 0 | 0:1.3.11.1-5.el7_9 |
| Red Hat:enterprise_linux:7::workstation | 389-ds-base-debuginfo | 0 | 0:1.3.11.1-5.el7_9 |
| Red Hat:enterprise_linux:7::workstation | 389-ds-base-devel | 0 | 0:1.3.11.1-5.el7_9 |
| Red Hat:enterprise_linux:7::workstation | 389-ds-base-libs | 0 | 0:1.3.11.1-5.el7_9 |
| Red Hat:enterprise_linux:7::workstation | 389-ds-base-snmp | 0 | 0:1.3.11.1-5.el7_9 |
| Red Hat:enterprise_linux:8::appstream | 389-ds-base | 0 | 0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb |
| Red Hat:enterprise_linux:8::appstream | 389-ds-base-debuginfo | 0 | 0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb |
| Red Hat:enterprise_linux:8::appstream | 389-ds-base-debugsource | 0 | 0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb |
| Red Hat:enterprise_linux:8::appstream | 389-ds-base-devel | 0 | 0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb |
| Red Hat:enterprise_linux:8::appstream | 389-ds-base-legacy-tools | 0 | 0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb |
| Red Hat:enterprise_linux:8::appstream | 389-ds-base-legacy-tools-debuginfo | 0 | 0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb |
| Red Hat:enterprise_linux:8::appstream | 389-ds-base-libs | 0 | 0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb |
| Red Hat:enterprise_linux:8::appstream | 389-ds-base-libs-debuginfo | 0 | 0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb |
| Red Hat:enterprise_linux:8::appstream | 389-ds-base-snmp | 0 | 0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb |
| Red Hat:enterprise_linux:8::appstream | 389-ds-base-snmp-debuginfo | 0 | 0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb |
| Red Hat:enterprise_linux:8::appstream | python3-lib389 | 0 | 0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb |
| Red Hat:enterprise_linux:9::appstream | 389-ds-base | 0 | 0:2.4.5-8.el9_4 |
| Red Hat:enterprise_linux:9::appstream | 389-ds-base-debuginfo | 0 | 0:2.4.5-8.el9_4 |
| Red Hat:enterprise_linux:9::appstream | 389-ds-base-debugsource | 0 | 0:2.4.5-8.el9_4 |
| Red Hat:enterprise_linux:9::appstream | 389-ds-base-devel | 0 | 0:2.4.5-8.el9_4 |
| Red Hat:enterprise_linux:9::appstream | 389-ds-base-libs | 0 | 0:2.4.5-8.el9_4 |
| Red Hat:enterprise_linux:9::appstream | 389-ds-base-libs-debuginfo | 0 | 0:2.4.5-8.el9_4 |
| Red Hat:enterprise_linux:9::appstream | 389-ds-base-snmp-debuginfo | 0 | 0:2.4.5-8.el9_4 |
| Red Hat:enterprise_linux:9::appstream | python3-lib389 | 0 | 0:2.4.5-8.el9_4 |
| Red Hat:enterprise_linux:9::crb | 389-ds-base | 0 | 0:2.4.5-8.el9_4 |
| Red Hat:enterprise_linux:9::crb | 389-ds-base-debuginfo | 0 | 0:2.4.5-8.el9_4 |
| Red Hat:enterprise_linux:9::crb | 389-ds-base-debugsource | 0 | 0:2.4.5-8.el9_4 |
| Red Hat:enterprise_linux:9::crb | 389-ds-base-devel | 0 | 0:2.4.5-8.el9_4 |
| Red Hat:enterprise_linux:9::crb | 389-ds-base-libs | 0 | 0:2.4.5-8.el9_4 |
| Red Hat:enterprise_linux:9::crb | 389-ds-base-libs-debuginfo | 0 | 0:2.4.5-8.el9_4 |
| Red Hat:enterprise_linux:9::crb | 389-ds-base-snmp-debuginfo | 0 | 0:2.4.5-8.el9_4 |
| Red Hat:enterprise_linux:9::crb | python3-lib389 | 0 | 0:2.4.5-8.el9_4 |
| Red Hat:rhel_eus:8.8::appstream | 389-ds-base | 0 | 0:1.4.3.35-5.module+el8.8.0+22193+5f98570a |
| Red Hat:rhel_eus:8.8::appstream | 389-ds-base-debuginfo | 0 | 0:1.4.3.35-5.module+el8.8.0+22193+5f98570a |
| Red Hat:rhel_eus:8.8::appstream | 389-ds-base-debugsource | 0 | 0:1.4.3.35-5.module+el8.8.0+22193+5f98570a |
| Red Hat:rhel_eus:8.8::appstream | 389-ds-base-devel | 0 | 0:1.4.3.35-5.module+el8.8.0+22193+5f98570a |
| Red Hat:rhel_eus:8.8::appstream | 389-ds-base-legacy-tools | 0 | 0:1.4.3.35-5.module+el8.8.0+22193+5f98570a |
| Red Hat:rhel_eus:8.8::appstream | 389-ds-base-legacy-tools-debuginfo | 0 | 0:1.4.3.35-5.module+el8.8.0+22193+5f98570a |
| Red Hat:rhel_eus:8.8::appstream | 389-ds-base-libs | 0 | 0:1.4.3.35-5.module+el8.8.0+22193+5f98570a |
| Red Hat:rhel_eus:8.8::appstream | 389-ds-base-libs-debuginfo | 0 | 0:1.4.3.35-5.module+el8.8.0+22193+5f98570a |
| Red Hat:rhel_eus:8.8::appstream | 389-ds-base-snmp | 0 | 0:1.4.3.35-5.module+el8.8.0+22193+5f98570a |
| Red Hat:rhel_eus:8.8::appstream | 389-ds-base-snmp-debuginfo | 0 | 0:1.4.3.35-5.module+el8.8.0+22193+5f98570a |
| Red Hat:rhel_eus:8.8::appstream | python3-lib389 | 0 | 0:1.4.3.35-5.module+el8.8.0+22193+5f98570a |
| Red Hat:rhel_eus:9.2::appstream | 389-ds-base | 0 | 0:2.2.4-9.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | 389-ds-base-debuginfo | 0 | 0:2.2.4-9.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | 389-ds-base-debugsource | 0 | 0:2.2.4-9.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | 389-ds-base-libs | 0 | 0:2.2.4-9.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | 389-ds-base-libs-debuginfo | 0 | 0:2.2.4-9.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | 389-ds-base-snmp-debuginfo | 0 | 0:2.2.4-9.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | python3-lib389 | 0 | 0:2.2.4-9.el9_2 |
| Rocky Linux:8 | 389-ds-base | 0 | 0:1.4.3.39-7.module+el8.10.0+1832+2f5a9255 |
| Rocky Linux:9 | 389-ds-base | 0 | 0:2.4.5-8.el9_4 |
| SUSE:Enterprise Storage 7.1 | 389-ds | 0 | 1.4.4.20~git3.e7ac6d87-150300.3.35.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | 389-ds | 0 | 1.4.4.20~git3.e7ac6d87-150300.3.35.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | 389-ds | 0 | 2.0.20~git9.5e2d637c-150400.3.42.3 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | 389-ds | 0 | 2.0.20~git9.5e2d637c-150400.3.42.3 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP5 | 389-ds | 0 | 2.2.10~git18.20ce9289-150500.3.24.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP5 | 389-ds | 0 | 2.2.10~git2.345056d3-150500.3.21.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP6 | 389-ds | 0 | 2.2.10~git18.20ce9289-150600.8.10.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP6 | 389-ds | 0 | 2.2.10~git2.345056d3-150600.8.7.2 |
| SUSE:Linux Enterprise Server 15 SP3-LTSS | 389-ds | 0 | 1.4.4.20~git3.e7ac6d87-150300.3.35.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | 389-ds | 0 | 2.0.20~git9.5e2d637c-150400.3.42.3 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | 389-ds | 0 | 1.4.4.20~git3.e7ac6d87-150300.3.35.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | 389-ds | 0 | 2.0.20~git9.5e2d637c-150400.3.42.3 |
| SUSE:Manager Proxy 4.3 | 389-ds | 0 | 2.0.20~git9.5e2d637c-150400.3.42.3 |
| SUSE:Manager Server 4.3 | 389-ds | 0 | 2.0.20~git9.5e2d637c-150400.3.42.3 |
| Ubuntu:20.04:LTS | 389-ds-base | 0 | No fix |
| Ubuntu:22.04:LTS | 389-ds-base | 0 | No fix |
| Ubuntu:24.04:LTS | 389-ds-base | 0 | No fix |
| Ubuntu:24.10 | 389-ds-base | 0 | No fix |
| Ubuntu:25.04 | 389-ds-base | 0 | No fix |
| Ubuntu:25.10 | 389-ds-base | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | 389-ds-base | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | 389-ds-base | 0 | No fix |
| Ubuntu:Pro:20.04:LTS | 389-ds-base | 0 | No fix |
| openSUSE:Leap 15.5 | 389-ds | 0 | 2.2.10~git18.20ce9289-150500.3.24.1 |
| openSUSE:Leap 15.5 | 389-ds | 0 | 2.2.10~git2.345056d3-150500.3.21.1 |
| openSUSE:Leap 15.6 | 389-ds | 0 | 2.2.10~git18.20ce9289-150600.8.10.1 |
| openSUSE:Leap 15.6 | 389-ds | 0 | 2.2.10~git2.345056d3-150600.8.7.2 |
| openSUSE:Tumbleweed | 389-ds | 0 | 3.1.1~git0.aef1668-1.1 |
Related vulnerabilities
- CVE-2024-5953 A denial of service vulnerability was found in the 389-ds-base LDAP server. Also affects 389-ds-base
- CVE-2024-2199 A denial of service vulnerability was found in 389-ds-base ldap server. Also affects 389-ds-base
- CVE-2024-1062 A heap overflow flaw was found in 389-ds-base. Also affects 389-ds-base
- CVE-2022-0996 A vulnerability was found in the 389 Directory Server that allows expired passwords to… Also affects 389-ds-base
- CVE-2021-4091 A double-free was found in the way 389-ds-base handles virtual attributes context in… Also affects 389-ds-base
- CVE-2024-6237 A flaw was found in the 389 Directory Server. Also affects 389-ds-base
- CVE-2024-8445 The fix for CVE-2024-2199 in 389-ds-base was insufficient to cover all scenarios. Also affects 389-ds-base
- CVE-2023-1055 A flaw was found in RHDS 11 and RHDS 12. Also affects 389-ds-base