CVE-2024-3657highCWE-20

389-ds-base: potential denial of service via specially crafted kerberos as-req request

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 1.3%

exploitation probability

1.3%top 32% of all CVEs

observed exploitation

nono source reports it

A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Red Hat · Red Hat Directory Server 11.5 E4S for RHEL 8 Red Hat · Red Hat Directory Server 11.7 for RHEL 8 Red Hat · Red Hat Directory Server 11.8 for RHEL 8 Red Hat · Red Hat Directory Server 11.9 for RHEL 8 Red Hat · Red Hat Directory Server 12.2 EUS for RHEL 9 Red Hat · Red Hat Directory Server 12.4 for RHEL 9 Red Hat · Red Hat Enterprise Linux 10 Red Hat · Red Hat Enterprise Linux 6 Red Hat · Red Hat Enterprise Linux 7 Red Hat · Red Hat Enterprise Linux 8 Red Hat · Red Hat Enterprise Linux 8.8 Extended Update Support Red Hat · Red Hat Enterprise Linux 9 Red Hat · Red Hat Enterprise Linux 9.2 Extended Update Support

References