(RHSA-2024:3837) Important: 389-ds-base security update

2024-06-1118:27:30

access.redhat.com

ldap server

389-ds-base

denial of service

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

JSON

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base
packages include the Lightweight Directory Access Protocol (LDAP) server and
command-line utilities for server administration.

Security Fix(es):

389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)
389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9s390x389-ds-base-devel< 2.4.5-8.el9_4389-ds-base-devel-2.4.5-8.el9_4.s390x.rpm
RedHat9x86_64389-ds-base-devel< 2.4.5-8.el9_4389-ds-base-devel-2.4.5-8.el9_4.x86_64.rpm
RedHat9s390x389-ds-base< 2.4.5-8.el9_4389-ds-base-2.4.5-8.el9_4.s390x.rpm
RedHat9x86_64389-ds-base-debugsource< 2.4.5-8.el9_4389-ds-base-debugsource-2.4.5-8.el9_4.x86_64.rpm
RedHat9x86_64389-ds-base-libs< 2.4.5-8.el9_4389-ds-base-libs-2.4.5-8.el9_4.x86_64.rpm
RedHat9s390x389-ds-base-debuginfo< 2.4.5-8.el9_4389-ds-base-debuginfo-2.4.5-8.el9_4.s390x.rpm
RedHat9aarch64389-ds-base< 2.4.5-8.el9_4389-ds-base-2.4.5-8.el9_4.aarch64.rpm
RedHat9aarch64389-ds-base-debuginfo< 2.4.5-8.el9_4389-ds-base-debuginfo-2.4.5-8.el9_4.aarch64.rpm
RedHat9ppc64le389-ds-base-libs-debuginfo< 2.4.5-8.el9_4389-ds-base-libs-debuginfo-2.4.5-8.el9_4.ppc64le.rpm
RedHat9aarch64389-ds-base-libs-debuginfo< 2.4.5-8.el9_4389-ds-base-libs-debuginfo-2.4.5-8.el9_4.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	s390x	389-ds-base-devel	< 2.4.5-8.el9_4	389-ds-base-devel-2.4.5-8.el9_4.s390x.rpm
RedHat	9	x86_64	389-ds-base-devel	< 2.4.5-8.el9_4	389-ds-base-devel-2.4.5-8.el9_4.x86_64.rpm
RedHat	9	s390x	389-ds-base	< 2.4.5-8.el9_4	389-ds-base-2.4.5-8.el9_4.s390x.rpm
RedHat	9	x86_64	389-ds-base-debugsource	< 2.4.5-8.el9_4	389-ds-base-debugsource-2.4.5-8.el9_4.x86_64.rpm
RedHat	9	x86_64	389-ds-base-libs	< 2.4.5-8.el9_4	389-ds-base-libs-2.4.5-8.el9_4.x86_64.rpm
RedHat	9	s390x	389-ds-base-debuginfo	< 2.4.5-8.el9_4	389-ds-base-debuginfo-2.4.5-8.el9_4.s390x.rpm
RedHat	9	aarch64	389-ds-base	< 2.4.5-8.el9_4	389-ds-base-2.4.5-8.el9_4.aarch64.rpm
RedHat	9	aarch64	389-ds-base-debuginfo	< 2.4.5-8.el9_4	389-ds-base-debuginfo-2.4.5-8.el9_4.aarch64.rpm
RedHat	9	ppc64le	389-ds-base-libs-debuginfo	< 2.4.5-8.el9_4	389-ds-base-libs-debuginfo-2.4.5-8.el9_4.ppc64le.rpm
RedHat	9	aarch64	389-ds-base-libs-debuginfo	< 2.4.5-8.el9_4	389-ds-base-libs-debuginfo-2.4.5-8.el9_4.aarch64.rpm