CVE-2024-3657 | BDVDB-2026-237666 Detail
Red HatRed Hat Directory Server 11.5 E4S for RHEL 8
Description#
A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact high. Attack vector: network.
Weaknesses#
- CWE-20 Improper Input Validation
References#
- https://access.redhat.com/errata/RHSA-2024:3591
- https://access.redhat.com/errata/RHSA-2024:3837
- https://access.redhat.com/errata/RHSA-2024:4092
- https://access.redhat.com/errata/RHSA-2024:4209
- https://access.redhat.com/errata/RHSA-2024:4210
- https://access.redhat.com/errata/RHSA-2024:4235
- https://access.redhat.com/errata/RHSA-2024:4633
- https://access.redhat.com/errata/RHSA-2024:5690
- https://access.redhat.com/errata/RHSA-2024:6576
- https://access.redhat.com/errata/RHSA-2024:7458
- https://access.redhat.com/errata/RHSA-2025:1632
- https://access.redhat.com/security/cve/CVE-2024-3657
- https://bugzilla.redhat.com/show_bug.cgi?id=2274401
- https://lists.debian.org/debian-lts-announce/2025/01/msg00015.html
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.