5.7

CVE-2024-5953

A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
Collection URLhttps://github.com/389ds/389-ds-base
≫
Package 389-ds-base
Default Statusaffected
VendorRed Hat
≫
Product Red Hat Directory Server 11.5 E4S for RHEL 8
Default Statusaffected
Version < *
Version 8060020250210084424.0ca98e7e
Status unaffected
VendorRed Hat
≫
Product Red Hat Directory Server 11.7 for RHEL 8
Default Statusaffected
Version < *
Version 8080020240909040333.f969626e
Status unaffected
VendorRed Hat
≫
Product Red Hat Directory Server 11.9 for RHEL 8
Default Statusaffected
Version < *
Version 8100020240902112955.37ed7c03
Status unaffected
VendorRed Hat
≫
Product Red Hat Directory Server 12.2 EUS for RHEL 9
Default Statusaffected
Version < *
Version 9020020240916150035.1674d574
Status unaffected
VendorRed Hat
≫
Product Red Hat Directory Server 12.4 for RHEL 9
Default Statusaffected
Version < *
Version 9040020240723122852.1674d574
Status unaffected
VendorRed Hat
≫
Product Red Hat Enterprise Linux 7 Extended Lifecycle Support
Default Statusaffected
Version < *
Version 0:1.3.11.1-6.el7_9
Status unaffected
VendorRed Hat
≫
Product Red Hat Enterprise Linux 8
Default Statusaffected
Version < *
Version 8100020240910065753.25e700aa
Status unaffected
VendorRed Hat
≫
Product Red Hat Enterprise Linux 8.8 Extended Update Support
Default Statusaffected
Version < *
Version 8080020240807050952.6dbb3803
Status unaffected
VendorRed Hat
≫
Product Red Hat Enterprise Linux 9
Default Statusaffected
Version < *
Version 0:2.4.5-9.el9_4
Status unaffected
VendorRed Hat
≫
Product Red Hat Enterprise Linux 9.2 Extended Update Support
Default Statusaffected
Version < *
Version 0:2.2.4-9.el9_2
Status unaffected
VendorRed Hat
≫
Product Red Hat Enterprise Linux 10
Default Statusunaffected
VendorRed Hat
≫
Product Red Hat Enterprise Linux 6
Default Statusunknown
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.09% 0.267
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
secalert@redhat.com 5.7 2.1 3.6
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-1288 Improper Validation of Consistency within Input

The product receives a complex input with multiple elements or fields that must be consistent with each other, but it does not validate or incorrectly validates that the input is actually consistent.