Log in Start free

Vulnerability · Published May 28, 2024 · Assigned by redhat

CVE-2024-3657389-ds-base: potential denial of service via specially crafted kerberos as-req request

High 7.5

In plain English

A high-severity improper input validation in Red Hat Directory Server 11.5 E4S for RHEL 8 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 70% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)1.3%top 29.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8389-ds-base1.4.3.39-7.module_el8.10.0+3864+d8eec553ALSA-2024:4235
AlmaLinux:9389-ds-base2.4.5-8.el9_4ALSA-2024:3837
AlmaLinux:8389-ds-base-devel1.4.3.39-7.module_el8.10.0+3864+d8eec553ALSA-2024:4235
AlmaLinux:9389-ds-base-devel2.4.5-8.el9_4ALSA-2024:3837
AlmaLinux:8389-ds-base-legacy-tools1.4.3.39-7.module_el8.10.0+3864+d8eec553ALSA-2024:4235
AlmaLinux:8389-ds-base-libs1.4.3.39-7.module_el8.10.0+3864+d8eec553ALSA-2024:4235
AlmaLinux:9389-ds-base-libs2.4.5-8.el9_4ALSA-2024:3837
AlmaLinux:8389-ds-base-snmp1.4.3.39-7.module_el8.10.0+3864+d8eec553ALSA-2024:4235
AlmaLinux:8python3-lib3891.4.3.39-7.module_el8.10.0+3864+d8eec553ALSA-2024:4235
AlmaLinux:9python3-lib3892.4.5-8.el9_4ALSA-2024:3837
Debian:12389-ds-base2.3.1+dfsg1-1+deb12u1DEBIAN-CVE-2024-3657
Debian:13389-ds-base3.1.1+dfsg1-1DEBIAN-CVE-2024-3657
Rocky Linux:8389-ds-base0:1.4.3.39-7.module+el8.10.0+1832+2f5a9255RLSA-2024:4235
Rocky Linux:9389-ds-base0:2.4.5-8.el9_4RLSA-2024:3837
Ubuntu:22.04:LTS389-ds-baseno fix listedUBUNTU-CVE-2024-3657
Ubuntu:24.04:LTS389-ds-baseno fix listedUBUNTU-CVE-2024-3657
Ubuntu:25.10389-ds-baseno fix listedUBUNTU-CVE-2024-3657
Ubuntu:26.04:LTS389-ds-baseno fix listedUBUNTU-CVE-2024-3657
Ubuntu:26.10389-ds-baseno fix listedUBUNTU-CVE-2024-3657

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 see references
Red Hat Red Hat Directory Server 11.7 for RHEL 8 see references
Red Hat Red Hat Directory Server 11.8 for RHEL 8 see references
Red Hat Red Hat Directory Server 11.9 for RHEL 8 see references
Red Hat Red Hat Directory Server 12.2 EUS for RHEL 9 see references
Red Hat Red Hat Directory Server 12.4 for RHEL 9 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 6 see references

Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References