Red Hat: CVE-2024-5953: 389-ds-base: Malformed userPassword hash may cause Denial of Service (Multiple Advisories)

Red Hat: CVE-2024-5953: 389-ds-base: Malformed userPassword hash may cause Denial of Service (Multiple Advisories)

Severity

6

CVSS

(AV:A/AC:L/Au:S/C:N/I:N/A:C)

Published

06/18/2024

Created

07/20/2024

Added

07/19/2024

Modified

09/13/2024

Description

A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.

Solution(s)

• redhat-upgrade-389-ds-base
• redhat-upgrade-389-ds-base-debuginfo
• redhat-upgrade-389-ds-base-debugsource
• redhat-upgrade-389-ds-base-devel
• redhat-upgrade-389-ds-base-legacy-tools
• redhat-upgrade-389-ds-base-legacy-tools-debuginfo
• redhat-upgrade-389-ds-base-libs
• redhat-upgrade-389-ds-base-libs-debuginfo
• redhat-upgrade-389-ds-base-snmp
• redhat-upgrade-389-ds-base-snmp-debuginfo
• redhat-upgrade-python3-lib389

References

• CVE-2024-5953
• RHSA-2024:4633
• RHSA-2024:5192
• RHSA-2024:5690
• RHSA-2024:6569