CVE-2024-2199

Published: May 28, 2024Modified: Jun 26, 2026Deferred

5.7

Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.1 / Impact: 3.6

Source: secalert@redhat.com (Secondary)

Description

A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (22)

https://access.redhat.com/errata/RHSA-2024:3591

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:3837

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:4092

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:4209

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:4210

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:4235

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:4633

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:5690

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2025:1632

Source: secalert@redhat.com

https://access.redhat.com/security/cve/CVE-2024-2199

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2267976

Source: secalert@redhat.com

https://www.port389.org/docs/389ds/releases/release-3-1-1.html

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:3591