PT-2024-37267 · Unknown+9 · 389-Ds-Base+9

Patrick Del Bello + 1 · Published 2024-06-13 · Updated 2025-03-16 · CVE-2024-5953

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: 389-ds-base (affected versions not specified)

Description: A denial of service issue was found in the 389-ds-base LDAP server, which may allow an authenticated user to cause a server denial of service while attempting to log in with a user who has a malformed hash in their password.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-1288

Related Identifiers

ALSA-2024:5192

ALSA-2024:6569

ALT-PU-2024-11458

ALT-PU-2024-11462

ALT-PU-2024-11466

BDU:2025-03459

CESA-2024_6569

CVE-2024-5953

DLA-4021-1

INFSA-2024_5192

INFSA-2024_6569

OESA-2024-2164

OESA-2024-2165

OESA-2024-2166

OESA-2024-2167

OESA-2024-2168

OPENSUSE-SU-2024:14227-1

OPENSUSE-SU-2024_3082-1

OPENSUSE-SU-2024_3218-1

OPENSUSE-SU-2024_3257-1

OPENSUSE-SU-2024_3843-1

OPENSUSE-SU-2024_3844-1

RHSA-2024:4633

RHSA-2024:4997

RHSA-2024:5192

RHSA-2024:5690

RHSA-2024:6153

RHSA-2024:6568

RHSA-2024:6569

RHSA-2024:6576

RHSA-2024:7458

RHSA-2024_5192

RHSA-2024_6569

RHSA-2025:1632

RLSA-2024:5192

RLSA-2024:6569

SUSE-SU-2024:2910-1

SUSE-SU-2024:3082-1

SUSE-SU-2024:3218-1

SUSE-SU-2024:3257-1

SUSE-SU-2024:3843-1

SUSE-SU-2024:3844-1

Affected Products

389-Ds-Base

Alt Linux

Almalinux

Astra Linux

Centos

Debian

Red Hat

Red Os

Rocky Linux

Suse

References · 88

• https://bdu.fstec.ru/vul/2025-03459 · Security Note
• https://osv.dev/vulnerability/OESA-2024-2167 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-5953 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-2168 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-5953 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:1632 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:3218-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2024:4997 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2024:5690 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:3257-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14227-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:6569 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-5953 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2024-5192.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:3843-1 · Vendor Advisory