Skip to content
CVE PROGRAM SOURCE RECORD5.7 Medium

CVE-2024-8445

389-ds-base: server crash while modifying `userpassword` using malformed input (incomplete fix for cve-2024-2199)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

The fix for CVE-2024-2199 in 389-ds-base was insufficient to cover all scenarios. In certain product versions, an authenticated user may cause a server crash while modifying `userPassword` using malformed input.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

389-ds-base

Default version status: unknown

  • 3.1.1affected

Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support

Default version status: affected

  • 0:1.3.11.1-7.el7_9 to < *unaffected

Red Hat Red Hat Directory Server 11

Default version status: unaffected

Red Hat Red Hat Directory Server 12

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 10

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: unaffected

References