5.7

CVE-2024-5953

389-ds-base: malformed userpassword hash may cause denial of service

A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
Collection URLhttps://github.com/389ds/389-ds-base
≫
Paket 389-ds-base
Default Statusaffected
HerstellerRed Hat
≫
Produkt Red Hat Directory Server 11.5 E4S for RHEL 8
Default Statusaffected
Version 8060020250210084424.0ca98e7e
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Directory Server 11.7 for RHEL 8
Default Statusaffected
Version 8080020240909040333.f969626e
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Directory Server 11.9 for RHEL 8
Default Statusaffected
Version 8100020240902112955.37ed7c03
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Directory Server 12.2 EUS for RHEL 9
Default Statusaffected
Version 9020020240916150035.1674d574
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Directory Server 12.4 for RHEL 9
Default Statusaffected
Version 9040020240723122852.1674d574
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 7 Extended Lifecycle Support
Default Statusaffected
Version 0:1.3.11.1-6.el7_9
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 8
Default Statusaffected
Version 8100020240910065753.25e700aa
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 8.8 Extended Update Support
Default Statusaffected
Version 8080020240807050952.6dbb3803
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 9
Default Statusaffected
Version 0:2.4.5-9.el9_4
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 9.2 Extended Update Support
Default Statusaffected
Version 0:2.2.4-9.el9_2
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 10
Default Statusunaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 6
Default Statusunknown
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.303
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
secalert@redhat.com 5.7 2.1 3.6
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-1288 Improper Validation of Consistency within Input

The product receives a complex input with multiple elements or fields that must be consistent with each other, but it does not validate or incorrectly validates that the input is actually consistent.