CVE-2024-5953
Medium · 5.7CVSS
5.7
EPSS
0.6%
Published
Jun 18, 2024
CISA due date
—
Cloudanix analysis
Monitor only
SSVC: Track
A problem in the company directory server lets someone who already has login rights crash the service by using an account with bad password data.
- Exploitation
- Adjacent Network
- Attacker needs
- Low Privilege
- Complexity
- Low
- Impact
- Denial Of Service
- Component
- Network Service
- Class
- Denial of service
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
An authenticated user can trigger a denial of service in the 389-ds-base LDAP server by attempting login with an account whose stored password hash is malformed, causing the server process to crash or hang.
Why it matters to the business
Directory authentication services become unavailable, blocking user logins, application access, and identity-dependent operations until the server is restarted.
How an attack unfolds
An attacker with valid LDAP credentials crafts or modifies a user entry containing a malformed password hash and performs a login attempt; the server fails to handle the malformed data and terminates or becomes unresponsive.
How to fix it
Upgrade 389-ds-base on Debian 11 to the fixed version 5.10.216-1 or later; apply vendor patches and restart the directory service.
How to confirm the fix worked
Confirm the installed package version matches or exceeds 5.10.216-1, then attempt login operations with test accounts containing known malformed hashes in a non-production environment to verify the server remains stable.
Typical attack path
- Obtain valid LDAP credentials for an account
- Modify or create the target user entry to contain a malformed password hash
- Perform a bind or login operation using those credentials
- Observe server crash or unresponsiveness
How to detect it
Review LDAP server logs and system crash dumps around the time of authentication failures for entries showing malformed hash processing or sudden process termination; correlate with authentication attempt timestamps.
What your security team should do
- Apply the fixed package version 5.10.216-1 immediately on all Debian 11 systems running 389-ds-base
- Monitor LDAP service health and implement rate-limiting or account lockout policies for authentication attempts
- Review password storage and migration procedures to prevent future malformed hash entries
The record
A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:8 | 389-ds-base | 0 | 1.4.3.39-8.module_el8.10.0+3891+cbd883bf |
| AlmaLinux:8 | 389-ds-base-devel | 0 | 1.4.3.39-8.module_el8.10.0+3891+cbd883bf |
| AlmaLinux:8 | 389-ds-base-legacy-tools | 0 | 1.4.3.39-8.module_el8.10.0+3891+cbd883bf |
| AlmaLinux:8 | 389-ds-base-libs | 0 | 1.4.3.39-8.module_el8.10.0+3891+cbd883bf |
| AlmaLinux:8 | 389-ds-base-snmp | 0 | 1.4.3.39-8.module_el8.10.0+3891+cbd883bf |
| AlmaLinux:8 | python3-lib389 | 0 | 1.4.3.39-8.module_el8.10.0+3891+cbd883bf |
| AlmaLinux:9 | 389-ds-base | 0 | 2.4.5-9.el9_4 |
| AlmaLinux:9 | 389-ds-base-devel | 0 | 2.4.5-9.el9_4 |
| AlmaLinux:9 | 389-ds-base-libs | 0 | 2.4.5-9.el9_4 |
| AlmaLinux:9 | python3-lib389 | 0 | 2.4.5-9.el9_4 |
| Debian:11 | 389-ds-base | 0 | No fix |
| Debian:11 | 389-ds-base | 0 | 1.4.4.11-2+deb11u1 |
| Debian:12 | 389-ds-base | 0 | No fix |
| Debian:13 | 389-ds-base | 0 | 3.1.1+dfsg1-1 |
| Red Hat:directory_server:11.7::el8 | 389-ds-base | 0 | 0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c |
| Red Hat:directory_server:11.7::el8 | 389-ds-base-debuginfo | 0 | 0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c |
| Red Hat:directory_server:11.7::el8 | 389-ds-base-debugsource | 0 | 0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c |
| Red Hat:directory_server:11.7::el8 | 389-ds-base-devel | 0 | 0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c |
| Red Hat:directory_server:11.7::el8 | 389-ds-base-legacy-tools | 0 | 0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c |
| Red Hat:directory_server:11.7::el8 | 389-ds-base-legacy-tools-debuginfo | 0 | 0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c |
| Red Hat:directory_server:11.7::el8 | 389-ds-base-libs | 0 | 0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c |
| Red Hat:directory_server:11.7::el8 | 389-ds-base-libs-debuginfo | 0 | 0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c |
| Red Hat:directory_server:11.7::el8 | 389-ds-base-snmp | 0 | 0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c |
| Red Hat:directory_server:11.7::el8 | 389-ds-base-snmp-debuginfo | 0 | 0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c |
| Red Hat:directory_server:11.7::el8 | cockpit-389-ds | 0 | 0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c |
| Red Hat:directory_server:11.7::el8 | python3-lib389 | 0 | 0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c |
| Red Hat:directory_server:11.9::el8 | 389-ds-base | 0 | 0:1.4.3.39-5.module+el8dsrv+22259+114d7218 |
| Red Hat:directory_server:11.9::el8 | 389-ds-base-debuginfo | 0 | 0:1.4.3.39-5.module+el8dsrv+22259+114d7218 |
| Red Hat:directory_server:11.9::el8 | 389-ds-base-debugsource | 0 | 0:1.4.3.39-5.module+el8dsrv+22259+114d7218 |
| Red Hat:directory_server:11.9::el8 | 389-ds-base-devel | 0 | 0:1.4.3.39-5.module+el8dsrv+22259+114d7218 |
| Red Hat:directory_server:11.9::el8 | 389-ds-base-legacy-tools | 0 | 0:1.4.3.39-5.module+el8dsrv+22259+114d7218 |
| Red Hat:directory_server:11.9::el8 | 389-ds-base-legacy-tools-debuginfo | 0 | 0:1.4.3.39-5.module+el8dsrv+22259+114d7218 |
| Red Hat:directory_server:11.9::el8 | 389-ds-base-libs | 0 | 0:1.4.3.39-5.module+el8dsrv+22259+114d7218 |
| Red Hat:directory_server:11.9::el8 | 389-ds-base-libs-debuginfo | 0 | 0:1.4.3.39-5.module+el8dsrv+22259+114d7218 |
| Red Hat:directory_server:11.9::el8 | 389-ds-base-snmp | 0 | 0:1.4.3.39-5.module+el8dsrv+22259+114d7218 |
| Red Hat:directory_server:11.9::el8 | 389-ds-base-snmp-debuginfo | 0 | 0:1.4.3.39-5.module+el8dsrv+22259+114d7218 |
| Red Hat:directory_server:11.9::el8 | cockpit-389-ds | 0 | 0:1.4.3.39-5.module+el8dsrv+22259+114d7218 |
| Red Hat:directory_server:11.9::el8 | python3-lib389 | 0 | 0:1.4.3.39-5.module+el8dsrv+22259+114d7218 |
| Red Hat:directory_server:12.4::el9 | 389-ds-base | 0 | 0:2.4.5-7.module+el9dsrv+22137+7a1133f7 |
| Red Hat:directory_server:12.4::el9 | 389-ds-base-debuginfo | 0 | 0:2.4.5-7.module+el9dsrv+22137+7a1133f7 |
| Red Hat:directory_server:12.4::el9 | 389-ds-base-debugsource | 0 | 0:2.4.5-7.module+el9dsrv+22137+7a1133f7 |
| Red Hat:directory_server:12.4::el9 | 389-ds-base-devel | 0 | 0:2.4.5-7.module+el9dsrv+22137+7a1133f7 |
| Red Hat:directory_server:12.4::el9 | 389-ds-base-libs | 0 | 0:2.4.5-7.module+el9dsrv+22137+7a1133f7 |
| Red Hat:directory_server:12.4::el9 | 389-ds-base-libs-debuginfo | 0 | 0:2.4.5-7.module+el9dsrv+22137+7a1133f7 |
| Red Hat:directory_server:12.4::el9 | 389-ds-base-snmp | 0 | 0:2.4.5-7.module+el9dsrv+22137+7a1133f7 |
| Red Hat:directory_server:12.4::el9 | 389-ds-base-snmp-debuginfo | 0 | 0:2.4.5-7.module+el9dsrv+22137+7a1133f7 |
| Red Hat:directory_server:12.4::el9 | cockpit-389-ds | 0 | 0:2.4.5-7.module+el9dsrv+22137+7a1133f7 |
| Red Hat:directory_server:12.4::el9 | python3-lib389 | 0 | 0:2.4.5-7.module+el9dsrv+22137+7a1133f7 |
| Red Hat:directory_server_eus:12.2::el9 | 389-ds-base | 0 | 0:2.2.7-6.module+el9dsrv+22320+37c894f3 |
| Red Hat:directory_server_eus:12.2::el9 | 389-ds-base-debuginfo | 0 | 0:2.2.7-6.module+el9dsrv+22320+37c894f3 |
| Red Hat:directory_server_eus:12.2::el9 | 389-ds-base-debugsource | 0 | 0:2.2.7-6.module+el9dsrv+22320+37c894f3 |
| Red Hat:directory_server_eus:12.2::el9 | 389-ds-base-devel | 0 | 0:2.2.7-6.module+el9dsrv+22320+37c894f3 |
| Red Hat:directory_server_eus:12.2::el9 | 389-ds-base-libs | 0 | 0:2.2.7-6.module+el9dsrv+22320+37c894f3 |
| Red Hat:directory_server_eus:12.2::el9 | 389-ds-base-libs-debuginfo | 0 | 0:2.2.7-6.module+el9dsrv+22320+37c894f3 |
| Red Hat:directory_server_eus:12.2::el9 | 389-ds-base-snmp | 0 | 0:2.2.7-6.module+el9dsrv+22320+37c894f3 |
| Red Hat:directory_server_eus:12.2::el9 | 389-ds-base-snmp-debuginfo | 0 | 0:2.2.7-6.module+el9dsrv+22320+37c894f3 |
| Red Hat:directory_server_eus:12.2::el9 | cockpit-389-ds | 0 | 0:2.2.7-6.module+el9dsrv+22320+37c894f3 |
| Red Hat:directory_server_eus:12.2::el9 | python3-lib389 | 0 | 0:2.2.7-6.module+el9dsrv+22320+37c894f3 |
| Red Hat:enterprise_linux:8::appstream | 389-ds-base | 0 | 0:1.4.3.39-8.module+el8.10.0+22275+e4fc04d4 |
| Red Hat:enterprise_linux:8::appstream | 389-ds-base-debuginfo | 0 | 0:1.4.3.39-8.module+el8.10.0+22275+e4fc04d4 |
| Red Hat:enterprise_linux:8::appstream | 389-ds-base-debugsource | 0 | 0:1.4.3.39-8.module+el8.10.0+22275+e4fc04d4 |
| Red Hat:enterprise_linux:8::appstream | 389-ds-base-devel | 0 | 0:1.4.3.39-8.module+el8.10.0+22275+e4fc04d4 |
| Red Hat:enterprise_linux:8::appstream | 389-ds-base-legacy-tools | 0 | 0:1.4.3.39-8.module+el8.10.0+22275+e4fc04d4 |
| Red Hat:enterprise_linux:8::appstream | 389-ds-base-legacy-tools-debuginfo | 0 | 0:1.4.3.39-8.module+el8.10.0+22275+e4fc04d4 |
| Red Hat:enterprise_linux:8::appstream | 389-ds-base-libs | 0 | 0:1.4.3.39-8.module+el8.10.0+22275+e4fc04d4 |
| Red Hat:enterprise_linux:8::appstream | 389-ds-base-libs-debuginfo | 0 | 0:1.4.3.39-8.module+el8.10.0+22275+e4fc04d4 |
| Red Hat:enterprise_linux:8::appstream | 389-ds-base-snmp | 0 | 0:1.4.3.39-8.module+el8.10.0+22275+e4fc04d4 |
| Red Hat:enterprise_linux:8::appstream | 389-ds-base-snmp-debuginfo | 0 | 0:1.4.3.39-8.module+el8.10.0+22275+e4fc04d4 |
| Red Hat:enterprise_linux:8::appstream | python3-lib389 | 0 | 0:1.4.3.39-8.module+el8.10.0+22275+e4fc04d4 |
| Red Hat:enterprise_linux:9::appstream | 389-ds-base | 0 | 0:2.4.5-9.el9_4 |
| Red Hat:enterprise_linux:9::appstream | 389-ds-base-debuginfo | 0 | 0:2.4.5-9.el9_4 |
| Red Hat:enterprise_linux:9::appstream | 389-ds-base-debugsource | 0 | 0:2.4.5-9.el9_4 |
| Red Hat:enterprise_linux:9::appstream | 389-ds-base-devel | 0 | 0:2.4.5-9.el9_4 |
| Red Hat:enterprise_linux:9::appstream | 389-ds-base-libs | 0 | 0:2.4.5-9.el9_4 |
| Red Hat:enterprise_linux:9::appstream | 389-ds-base-libs-debuginfo | 0 | 0:2.4.5-9.el9_4 |
| Red Hat:enterprise_linux:9::appstream | 389-ds-base-snmp-debuginfo | 0 | 0:2.4.5-9.el9_4 |
| Red Hat:enterprise_linux:9::appstream | python3-lib389 | 0 | 0:2.4.5-9.el9_4 |
| Red Hat:enterprise_linux:9::crb | 389-ds-base | 0 | 0:2.4.5-9.el9_4 |
| Red Hat:enterprise_linux:9::crb | 389-ds-base-debuginfo | 0 | 0:2.4.5-9.el9_4 |
| Red Hat:enterprise_linux:9::crb | 389-ds-base-debugsource | 0 | 0:2.4.5-9.el9_4 |
| Red Hat:enterprise_linux:9::crb | 389-ds-base-devel | 0 | 0:2.4.5-9.el9_4 |
| Red Hat:enterprise_linux:9::crb | 389-ds-base-libs | 0 | 0:2.4.5-9.el9_4 |
| Red Hat:enterprise_linux:9::crb | 389-ds-base-libs-debuginfo | 0 | 0:2.4.5-9.el9_4 |
| Red Hat:enterprise_linux:9::crb | 389-ds-base-snmp-debuginfo | 0 | 0:2.4.5-9.el9_4 |
| Red Hat:enterprise_linux:9::crb | python3-lib389 | 0 | 0:2.4.5-9.el9_4 |
| Red Hat:rhel_els:7 | 389-ds-base | 0 | 0:1.3.11.1-6.el7_9 |
| Red Hat:rhel_els:7 | 389-ds-base-debuginfo | 0 | 0:1.3.11.1-6.el7_9 |
| Red Hat:rhel_els:7 | 389-ds-base-devel | 0 | 0:1.3.11.1-6.el7_9 |
| Red Hat:rhel_els:7 | 389-ds-base-libs | 0 | 0:1.3.11.1-6.el7_9 |
| Red Hat:rhel_els:7 | 389-ds-base-snmp | 0 | 0:1.3.11.1-6.el7_9 |
| Red Hat:rhel_eus:8.8::appstream | 389-ds-base | 0 | 0:1.4.3.35-5.module+el8.8.0+22193+5f98570a |
| Red Hat:rhel_eus:8.8::appstream | 389-ds-base-debuginfo | 0 | 0:1.4.3.35-5.module+el8.8.0+22193+5f98570a |
| Red Hat:rhel_eus:8.8::appstream | 389-ds-base-debugsource | 0 | 0:1.4.3.35-5.module+el8.8.0+22193+5f98570a |
| Red Hat:rhel_eus:8.8::appstream | 389-ds-base-devel | 0 | 0:1.4.3.35-5.module+el8.8.0+22193+5f98570a |
| Red Hat:rhel_eus:8.8::appstream | 389-ds-base-legacy-tools | 0 | 0:1.4.3.35-5.module+el8.8.0+22193+5f98570a |
| Red Hat:rhel_eus:8.8::appstream | 389-ds-base-legacy-tools-debuginfo | 0 | 0:1.4.3.35-5.module+el8.8.0+22193+5f98570a |
| Red Hat:rhel_eus:8.8::appstream | 389-ds-base-libs | 0 | 0:1.4.3.35-5.module+el8.8.0+22193+5f98570a |
| Red Hat:rhel_eus:8.8::appstream | 389-ds-base-libs-debuginfo | 0 | 0:1.4.3.35-5.module+el8.8.0+22193+5f98570a |
| Red Hat:rhel_eus:8.8::appstream | 389-ds-base-snmp | 0 | 0:1.4.3.35-5.module+el8.8.0+22193+5f98570a |
| Red Hat:rhel_eus:8.8::appstream | 389-ds-base-snmp-debuginfo | 0 | 0:1.4.3.35-5.module+el8.8.0+22193+5f98570a |
| Red Hat:rhel_eus:8.8::appstream | python3-lib389 | 0 | 0:1.4.3.35-5.module+el8.8.0+22193+5f98570a |
| Red Hat:rhel_eus:9.2::appstream | 389-ds-base | 0 | 0:2.2.4-9.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | 389-ds-base-debuginfo | 0 | 0:2.2.4-9.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | 389-ds-base-debugsource | 0 | 0:2.2.4-9.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | 389-ds-base-libs | 0 | 0:2.2.4-9.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | 389-ds-base-libs-debuginfo | 0 | 0:2.2.4-9.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | 389-ds-base-snmp-debuginfo | 0 | 0:2.2.4-9.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | python3-lib389 | 0 | 0:2.2.4-9.el9_2 |
| Rocky Linux:8 | 389-ds-base | 0 | 0:1.4.3.39-8.module+el8.10.0+1866+6d9051ff |
| Rocky Linux:9 | 389-ds-base | 0 | 0:2.4.5-9.el9_4 |
| SUSE:Enterprise Storage 7.1 | 389-ds | 0 | 1.4.4.20~git3.e7ac6d87-150300.3.35.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | 389-ds | 0 | 1.4.4.20~git3.e7ac6d87-150300.3.35.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | 389-ds | 0 | 2.0.20~git9.5e2d637c-150400.3.42.3 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | 389-ds | 0 | 2.0.20~git9.5e2d637c-150400.3.42.3 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP5 | 389-ds | 0 | 2.2.10~git2.345056d3-150500.3.21.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP5 | 389-ds | 0 | 2.2.10~git18.20ce9289-150500.3.24.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP6 | 389-ds | 0 | 2.2.10~git2.345056d3-150600.8.7.2 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP6 | 389-ds | 0 | 2.2.10~git18.20ce9289-150600.8.10.1 |
| SUSE:Linux Enterprise Server 15 SP3-LTSS | 389-ds | 0 | 1.4.4.20~git3.e7ac6d87-150300.3.35.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | 389-ds | 0 | 2.0.20~git9.5e2d637c-150400.3.42.3 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | 389-ds | 0 | 1.4.4.20~git3.e7ac6d87-150300.3.35.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | 389-ds | 0 | 2.0.20~git9.5e2d637c-150400.3.42.3 |
| SUSE:Manager Proxy 4.3 | 389-ds | 0 | 2.0.20~git9.5e2d637c-150400.3.42.3 |
| SUSE:Manager Server 4.3 | 389-ds | 0 | 2.0.20~git9.5e2d637c-150400.3.42.3 |
| Ubuntu:20.04:LTS | 389-ds-base | 0 | No fix |
| Ubuntu:22.04:LTS | 389-ds-base | 0 | No fix |
| Ubuntu:24.04:LTS | 389-ds-base | 0 | No fix |
| Ubuntu:24.10 | 389-ds-base | 0 | No fix |
| Ubuntu:25.04 | 389-ds-base | 0 | No fix |
| Ubuntu:25.10 | 389-ds-base | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | 389-ds-base | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | 389-ds-base | 0 | No fix |
| Ubuntu:Pro:20.04:LTS | 389-ds-base | 0 | No fix |
| openSUSE:Leap 15.5 | 389-ds | 0 | 2.2.10~git2.345056d3-150500.3.21.1 |
| openSUSE:Leap 15.5 | 389-ds | 0 | 2.2.10~git18.20ce9289-150500.3.24.1 |
| openSUSE:Leap 15.6 | 389-ds | 0 | 2.2.10~git2.345056d3-150600.8.7.2 |
| openSUSE:Leap 15.6 | 389-ds | 0 | 2.2.10~git18.20ce9289-150600.8.10.1 |
| openSUSE:Tumbleweed | 389-ds | 0 | 3.1.1~git0.aef1668-1.1 |
Related vulnerabilities
- CVE-2024-3657 A flaw was found in 389-ds-base. Also affects 389-ds-base
- CVE-2024-2199 A denial of service vulnerability was found in 389-ds-base ldap server. Also affects 389-ds-base
- CVE-2024-1062 A heap overflow flaw was found in 389-ds-base. Also affects 389-ds-base
- CVE-2022-0996 A vulnerability was found in the 389 Directory Server that allows expired passwords to… Also affects 389-ds-base
- CVE-2021-4091 A double-free was found in the way 389-ds-base handles virtual attributes context in… Also affects 389-ds-base
- CVE-2024-6237 A flaw was found in the 389 Directory Server. Also affects 389-ds-base
- CVE-2024-8445 The fix for CVE-2024-2199 in 389-ds-base was insufficient to cover all scenarios. Also affects 389-ds-base
- CVE-2023-1055 A flaw was found in RHDS 11 and RHDS 12. Also affects 389-ds-base