Vulnerabilidades de directory server 12.4 (CVE)

Registros CVE publicados para directory server 12.4, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

4 resultados

6.5Media

CVE-2024-6237 hace 2 años

389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request

389-ds-base; Red Hat Red Hat Directory Server 12.4 for RHEL 9; Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat Directory Server 11

A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.

5.7Media

CVE-2024-5953 hace 2 años

389-ds-base: malformed userpassword hash may cause denial of service

389-ds-base; Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8

A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.

7.5Alta

CVE-2024-3657 hace 2 años

389-ds-base: potential denial of service via specially crafted kerberos as-req request

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 for RHEL 8; Red Hat Red Hat Directory Server 11.8 for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8

A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service

1.3%EPSS

5.7Media

CVE-2024-2199 hace 2 años

389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c

389-ds-base; Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.8 for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8

A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.