Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-6237

389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request

Description

A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

389-ds-base

Default version status: unaffected

  • 0 to < 2.4.5affected

Red Hat Red Hat Directory Server 12.4 for RHEL 9

Default version status: affected

  • 9040020240723122852.1674d574 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:2.4.5-9.el9_4 to < *unaffected

Red Hat Red Hat Directory Server 11

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 10

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 7

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: unaffected

References