Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2024-3657 (GCVE-0-2024-3657)
Vulnerability from cvelistv5 – Published: 2024-05-28 12:53 – Updated: 2025-11-06 20:56
VLAI?
EPSS
Summary
A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service
Severity ?
7.5 (High)
CWE
- CWE-20 - Improper Input Validation
Assigner
References
Impacted products
| Vendor | Product | Version | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Red Hat | Red Hat Directory Server 11.5 E4S for RHEL 8 |
Unaffected:
8060020250210084424.0ca98e7e , < *
(rpm)
cpe:/a:redhat:directory_server_e4s:11.5::el8 |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-3657",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-06-05T20:48:33.613730Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-06-05T20:49:13.347Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2025-11-03T20:37:48.319Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "RHSA-2024:3591",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2024:3591"
},
{
"name": "RHSA-2024:3837",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2024:3837"
},
{
"name": "RHSA-2024:4092",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2024:4092"
},
{
"name": "RHSA-2024:4209",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2024:4209"
},
{
"name": "RHSA-2024:4210",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2024:4210"
},
{
"name": "RHSA-2024:4235",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2024:4235"
},
{
"name": "RHSA-2024:4633",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2024:4633"
},
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/security/cve/CVE-2024-3657"
},
{
"name": "RHBZ#2274401",
"tags": [
"issue-tracking",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00015.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:directory_server_e4s:11.5::el8"
],
"defaultStatus": "affected",
"packageName": "redhat-ds:11",
"product": "Red Hat Directory Server 11.5 E4S for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8060020250210084424.0ca98e7e",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:directory_server:11.7::el8"
],
"defaultStatus": "affected",
"packageName": "redhat-ds:11",
"product": "Red Hat Directory Server 11.7 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8080020240909040333.f969626e",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:directory_server:11.8::el8"
],
"defaultStatus": "affected",
"packageName": "redhat-ds:11",
"product": "Red Hat Directory Server 11.8 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8090020240606122459.91529cd0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:directory_server:11.9::el8"
],
"defaultStatus": "affected",
"packageName": "redhat-ds:11",
"product": "Red Hat Directory Server 11.9 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020240604161237.37ed7c03",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:directory_server_eus:12.2::el9"
],
"defaultStatus": "affected",
"packageName": "redhat-ds:12",
"product": "Red Hat Directory Server 12.2 EUS for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "9020020240916150035.1674d574",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:directory_server:12.4::el9"
],
"defaultStatus": "affected",
"packageName": "redhat-ds:12",
"product": "Red Hat Directory Server 12.4 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "9040020240604143706.1674d574",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7::server",
"cpe:/o:redhat:enterprise_linux:7::computenode",
"cpe:/o:redhat:enterprise_linux:7::workstation",
"cpe:/o:redhat:enterprise_linux:7::client"
],
"defaultStatus": "affected",
"packageName": "389-ds-base",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.3.11.1-5.el7_9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::appstream"
],
"defaultStatus": "affected",
"packageName": "389-ds:1.4",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020240613122040.25e700aa",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:8.8::appstream"
],
"defaultStatus": "affected",
"packageName": "389-ds:1.4",
"product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8080020240807050952.6dbb3803",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/a:redhat:enterprise_linux:9::crb"
],
"defaultStatus": "affected",
"packageName": "389-ds-base",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.4.5-8.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.2::appstream"
],
"defaultStatus": "affected",
"packageName": "389-ds-base",
"product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.2.4-9.el9_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "389-ds-base",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:6"
],
"defaultStatus": "unknown",
"packageName": "389-ds-base",
"product": "Red Hat Enterprise Linux 6",
"vendor": "Red Hat"
}
],
"datePublic": "2024-05-28T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service"
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "Improper Input Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-11-06T20:56:31.849Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "RHSA-2024:3591",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2024:3591"
},
{
"name": "RHSA-2024:3837",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2024:3837"
},
{
"name": "RHSA-2024:4092",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2024:4092"
},
{
"name": "RHSA-2024:4209",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2024:4209"
},
{
"name": "RHSA-2024:4210",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2024:4210"
},
{
"name": "RHSA-2024:4235",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2024:4235"
},
{
"name": "RHSA-2024:4633",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2024:4633"
},
{
"name": "RHSA-2024:5690",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2024:5690"
},
{
"name": "RHSA-2024:6576",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2024:6576"
},
{
"name": "RHSA-2024:7458",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2024:7458"
},
{
"name": "RHSA-2025:1632",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:1632"
},
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2024-3657"
},
{
"name": "RHBZ#2274401",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
}
],
"timeline": [
{
"lang": "en",
"time": "2024-04-10T00:00:00+00:00",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2024-05-28T00:00:00+00:00",
"value": "Made public."
}
],
"title": "389-ds-base: potential denial of service via specially crafted kerberos as-req request",
"workarounds": [
{
"lang": "en",
"value": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
}
],
"x_redhatCweChain": "CWE-20: Improper Input Validation"
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2024-3657",
"datePublished": "2024-05-28T12:53:03.399Z",
"dateReserved": "2024-04-11T14:21:25.571Z",
"dateUpdated": "2025-11-06T20:56:31.849Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"descriptions": "[{\"lang\": \"en\", \"value\": \"A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service\"}, {\"lang\": \"es\", \"value\": \"Se encontr\\u00f3 una falla en 389-ds-base. Una consulta LDAP especialmente manipulada puede causar potencialmente una falla en el servidor de directorio, lo que lleva a una denegaci\\u00f3n de servicio.\"}]",
"id": "CVE-2024-3657",
"lastModified": "2024-11-21T09:30:07.047",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"secalert@redhat.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.6}]}",
"published": "2024-05-28T13:15:11.057",
"references": "[{\"url\": \"https://access.redhat.com/errata/RHSA-2024:3591\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:3837\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:4092\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:4209\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:4210\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:4235\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:4633\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:5690\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:6576\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:7458\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://access.redhat.com/security/cve/CVE-2024-3657\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2274401\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:3591\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:3837\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:4092\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:4209\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:4210\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:4235\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:4633\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://access.redhat.com/security/cve/CVE-2024-3657\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2274401\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": "[{\"source\": \"secalert@redhat.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-20\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2024-3657\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2024-05-28T13:15:11.057\",\"lastModified\":\"2025-11-03T21:16:16.273\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service\"},{\"lang\":\"es\",\"value\":\"Se encontr\u00f3 una falla en 389-ds-base. Una consulta LDAP especialmente manipulada puede causar potencialmente una falla en el servidor de directorio, lo que lleva a una denegaci\u00f3n de servicio.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]}],\"references\":[{\"url\":\"https://access.redhat.com/errata/RHSA-2024:3591\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2024:3837\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2024:4092\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2024:4209\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2024:4210\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2024:4235\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2024:4633\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2024:5690\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2024:6576\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2024:7458\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:1632\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2024-3657\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2274401\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2024:3591\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2024:3837\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2024:4092\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2024:4209\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2024:4210\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2024:4235\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2024:4633\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2024-3657\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2274401\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/01/msg00015.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://access.redhat.com/errata/RHSA-2024:3591\", \"name\": \"RHSA-2024:3591\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:3837\", \"name\": \"RHSA-2024:3837\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:4092\", \"name\": \"RHSA-2024:4092\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:4209\", \"name\": \"RHSA-2024:4209\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:4210\", \"name\": \"RHSA-2024:4210\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:4235\", \"name\": \"RHSA-2024:4235\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:4633\", \"name\": \"RHSA-2024:4633\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/security/cve/CVE-2024-3657\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2274401\", \"name\": \"RHBZ#2274401\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2025/01/msg00015.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T20:37:48.319Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-3657\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-06-05T20:48:33.613730Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-06-05T20:49:00.838Z\"}}], \"cna\": {\"title\": \"389-ds-base: potential denial of service via specially crafted kerberos as-req request\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:directory_server_e4s:11.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Directory Server 11.5 E4S for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"8060020250210084424.0ca98e7e\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"redhat-ds:11\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:directory_server:11.7::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Directory Server 11.7 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"8080020240909040333.f969626e\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"redhat-ds:11\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:directory_server:11.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Directory Server 11.8 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"8090020240606122459.91529cd0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"redhat-ds:11\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:directory_server:11.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Directory Server 11.9 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"8100020240604161237.37ed7c03\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"redhat-ds:11\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:directory_server_eus:12.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Directory Server 12.2 EUS for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"9020020240916150035.1674d574\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"redhat-ds:12\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:directory_server:12.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Directory Server 12.4 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"9040020240604143706.1674d574\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"redhat-ds:12\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7::server\", \"cpe:/o:redhat:enterprise_linux:7::computenode\", \"cpe:/o:redhat:enterprise_linux:7::workstation\", \"cpe:/o:redhat:enterprise_linux:7::client\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.3.11.1-5.el7_9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"389-ds-base\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"8100020240613122040.25e700aa\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"389-ds:1.4\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"8080020240807050952.6dbb3803\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"389-ds:1.4\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/a:redhat:enterprise_linux:9::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.4.5-8.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"389-ds-base\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.2.4-9.el9_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"389-ds-base\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"389-ds-base\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 6\", \"packageName\": \"389-ds-base\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2024-04-10T00:00:00+00:00\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2024-05-28T00:00:00+00:00\", \"value\": \"Made public.\"}], \"datePublic\": \"2024-05-28T00:00:00.000Z\", \"references\": [{\"url\": \"https://access.redhat.com/errata/RHSA-2024:3591\", \"name\": \"RHSA-2024:3591\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:3837\", \"name\": \"RHSA-2024:3837\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:4092\", \"name\": \"RHSA-2024:4092\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:4209\", \"name\": \"RHSA-2024:4209\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:4210\", \"name\": \"RHSA-2024:4210\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:4235\", \"name\": \"RHSA-2024:4235\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:4633\", \"name\": \"RHSA-2024:4633\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:5690\", \"name\": \"RHSA-2024:5690\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:6576\", \"name\": \"RHSA-2024:6576\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2024:7458\", \"name\": \"RHSA-2024:7458\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:1632\", \"name\": \"RHSA-2025:1632\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/security/cve/CVE-2024-3657\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2274401\", \"name\": \"RHBZ#2274401\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-20\", \"description\": \"Improper Input Validation\"}]}], \"providerMetadata\": {\"orgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"shortName\": \"redhat\", \"dateUpdated\": \"2025-11-06T20:56:31.849Z\"}, \"x_redhatCweChain\": \"CWE-20: Improper Input Validation\"}}",
"cveMetadata": "{\"cveId\": \"CVE-2024-3657\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-11-06T20:56:31.849Z\", \"dateReserved\": \"2024-04-11T14:21:25.571Z\", \"assignerOrgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"datePublished\": \"2024-05-28T12:53:03.399Z\", \"assignerShortName\": \"redhat\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2025:1632
Vulnerability from csaf_redhat - Published: 2025-02-18 10:15 - Updated: 2025-11-21 19:26Summary
Red Hat Security Advisory: redhat-ds:11 security update
Notes
Topic
An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.5 E4S for RHEL 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration.
Security Fix(es):
* 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) (CVE-2024-1062)
* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)
* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)
* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.5 E4S for RHEL 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration.\n\nSecurity Fix(es):\n\n* 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) (CVE-2024-1062)\n\n* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)\n\n* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)\n\n* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:1632",
"url": "https://access.redhat.com/errata/RHSA-2025:1632"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2261879",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261879"
},
{
"category": "external",
"summary": "2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "2292104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292104"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1632.json"
}
],
"title": "Red Hat Security Advisory: redhat-ds:11 security update",
"tracking": {
"current_release_date": "2025-11-21T19:26:41+00:00",
"generator": {
"date": "2025-11-21T19:26:41+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2025:1632",
"initial_release_date": "2025-02-18T10:15:43+00:00",
"revision_history": [
{
"date": "2025-02-18T10:15:43+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-02-18T10:15:43+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T19:26:41+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Directory Server 11.5 E4S for RHEL 8",
"product": {
"name": "Red Hat Directory Server 11.5 E4S for RHEL 8",
"product_id": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:directory_server_e4s:11.5::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Directory Server"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.src::redhat-ds:11",
"product": {
"name": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.src (redhat-ds:11)",
"product_id": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.src::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.34-4.module%2Bel8dsrv%2B22781%2B5fe99dde?arch=src\u0026rpmmod=redhat-ds:11:8060020250210084424:0ca98e7e"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.34-4.module%2Bel8dsrv%2B22781%2B5fe99dde?arch=x86_64\u0026rpmmod=redhat-ds:11:8060020250210084424:0ca98e7e"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.34-4.module%2Bel8dsrv%2B22781%2B5fe99dde?arch=x86_64\u0026rpmmod=redhat-ds:11:8060020250210084424:0ca98e7e"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.34-4.module%2Bel8dsrv%2B22781%2B5fe99dde?arch=x86_64\u0026rpmmod=redhat-ds:11:8060020250210084424:0ca98e7e"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.34-4.module%2Bel8dsrv%2B22781%2B5fe99dde?arch=x86_64\u0026rpmmod=redhat-ds:11:8060020250210084424:0ca98e7e"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.34-4.module%2Bel8dsrv%2B22781%2B5fe99dde?arch=x86_64\u0026rpmmod=redhat-ds:11:8060020250210084424:0ca98e7e"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.34-4.module%2Bel8dsrv%2B22781%2B5fe99dde?arch=x86_64\u0026rpmmod=redhat-ds:11:8060020250210084424:0ca98e7e"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.34-4.module%2Bel8dsrv%2B22781%2B5fe99dde?arch=x86_64\u0026rpmmod=redhat-ds:11:8060020250210084424:0ca98e7e"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.34-4.module%2Bel8dsrv%2B22781%2B5fe99dde?arch=x86_64\u0026rpmmod=redhat-ds:11:8060020250210084424:0ca98e7e"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.34-4.module%2Bel8dsrv%2B22781%2B5fe99dde?arch=x86_64\u0026rpmmod=redhat-ds:11:8060020250210084424:0ca98e7e"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.34-4.module%2Bel8dsrv%2B22781%2B5fe99dde?arch=x86_64\u0026rpmmod=redhat-ds:11:8060020250210084424:0ca98e7e"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11",
"product": {
"name": "cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch (redhat-ds:11)",
"product_id": "cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cockpit-389-ds@1.4.3.34-4.module%2Bel8dsrv%2B22781%2B5fe99dde?arch=noarch\u0026rpmmod=redhat-ds:11:8060020250210084424:0ca98e7e"
}
}
},
{
"category": "product_version",
"name": "python3-lib389-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11",
"product": {
"name": "python3-lib389-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch (redhat-ds:11)",
"product_id": "python3-lib389-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-lib389@1.4.3.34-4.module%2Bel8dsrv%2B22781%2B5fe99dde?arch=noarch\u0026rpmmod=redhat-ds:11:8060020250210084424:0ca98e7e"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.src (redhat-ds:11) as a component of Red Hat Directory Server 11.5 E4S for RHEL 8",
"product_id": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.src::redhat-ds:11"
},
"product_reference": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.src::redhat-ds:11",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.5 E4S for RHEL 8",
"product_id": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.5 E4S for RHEL 8",
"product_id": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.5 E4S for RHEL 8",
"product_id": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.5 E4S for RHEL 8",
"product_id": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.5 E4S for RHEL 8",
"product_id": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.5 E4S for RHEL 8",
"product_id": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.5 E4S for RHEL 8",
"product_id": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.5 E4S for RHEL 8",
"product_id": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.5 E4S for RHEL 8",
"product_id": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.5 E4S for RHEL 8",
"product_id": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch (redhat-ds:11) as a component of Red Hat Directory Server 11.5 E4S for RHEL 8",
"product_id": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11"
},
"product_reference": "cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-lib389-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch (redhat-ds:11) as a component of Red Hat Directory Server 11.5 E4S for RHEL 8",
"product_id": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11"
},
"product_reference": "python3-lib389-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-1062",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2024-01-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2261879"
}
],
"notes": [
{
"category": "description",
"text": "A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.src::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-1062"
},
{
"category": "external",
"summary": "RHBZ#2261879",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261879"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-1062",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-1062"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-1062",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1062"
},
{
"category": "external",
"summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2256711",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256711"
}
],
"release_date": "2024-01-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-02-18T10:15:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.src::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:1632"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.src::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.src::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)"
},
{
"cve": "CVE-2024-2199",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-03-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2267976"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "LDAP servers are not usually exposed to the open internet, requiring adjacent connectivity for a successful attack. This issue also requires a compromised user account to perform the attack. Therefore, this flaw is rated as a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.src::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-2199"
},
{
"category": "external",
"summary": "RHBZ#2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-2199",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2199"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-02-18T10:15:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.src::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:1632"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.src::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.src::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c"
},
{
"cve": "CVE-2024-3657",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-04-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2274401"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is categorized as an important severity issue rather than a critical one because, while it can cause a denial of service by stopping the directory service, it does not allow for remote code execution, privilege escalation, or data exfiltration. The impact is limited to service disruption, which can be mitigated by monitoring and automatic service restarts. Additionally, exploiting this vulnerability requires specific crafted packets, indicating that an attacker would need a certain level of knowledge and access to execute the attack, reducing the likelihood of widespread exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.src::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "RHBZ#2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-3657",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3657"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-02-18T10:15:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.src::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:1632"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.src::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.src::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request"
},
{
"acknowledgments": [
{
"names": [
"T\u00eako Mihinto"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2024-5953",
"cwe": {
"id": "CWE-1288",
"name": "Improper Validation of Consistency within Input"
},
"discovery_date": "2024-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2292104"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: Malformed userPassword hash may cause Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "LDAP servers are not usually exposed to the open internet, requiring adjacent connectivity for a successful attack. This issue also requires a compromised user account to perform the attack. Therefore, this flaw is rated as a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.src::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-5953"
},
{
"category": "external",
"summary": "RHBZ#2292104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292104"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-5953",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5953"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-5953",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5953"
}
],
"release_date": "2024-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-02-18T10:15:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.src::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:1632"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.src::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.src::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.x86_64::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11",
"BaseOS-8.6.0.Z.E4S-DirSrv-11.5-E4S:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde.noarch::redhat-ds:11"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: Malformed userPassword hash may cause Denial of Service"
}
]
}
RHSA-2024_6576
Vulnerability from csaf_redhat - Published: 2024-09-11 06:38 - Updated: 2024-11-24 17:48Summary
Red Hat Security Advisory: redhat-ds:11 security and bug fix update
Notes
Topic
An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.7 for RHEL 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration.
Security Fixes:
* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)
* 389-ds-base: Specially crafted kerberos AS-REQ request may cause Denial of Service (CVE-2024-3657)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Improved performance of filter component when evaluating a large value
set, such as group members (DIRSRV-153)
* The new connection timeout error no longer breaks error mapping (DIRSRV-154)
Users of Red Hat Directory Server 11 are advised to install these updated packages.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.7 for RHEL 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration.\n\nSecurity Fixes:\n\n* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)\n\n* 389-ds-base: Specially crafted kerberos AS-REQ request may cause Denial of Service (CVE-2024-3657)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Improved performance of filter component when evaluating a large value\nset, such as group members (DIRSRV-153)\n\n* The new connection timeout error no longer breaks error mapping (DIRSRV-154)\n\nUsers of Red Hat Directory Server 11 are advised to install these updated packages.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:6576",
"url": "https://access.redhat.com/errata/RHSA-2024:6576"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "2292104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292104"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6576.json"
}
],
"title": "Red Hat Security Advisory: redhat-ds:11 security and bug fix update",
"tracking": {
"current_release_date": "2024-11-24T17:48:55+00:00",
"generator": {
"date": "2024-11-24T17:48:55+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2024:6576",
"initial_release_date": "2024-09-11T06:38:09+00:00",
"revision_history": [
{
"date": "2024-09-11T06:38:09+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-09-11T06:38:09+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-24T17:48:55+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Directory Server 11.7 for RHEL 8",
"product": {
"name": "Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:directory_server:11.7::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Directory Server"
},
{
"branches": [
{
"category": "product_version",
"name": "redhat-ds:11:8080020240909040333:f969626e",
"product": {
"name": "redhat-ds:11:8080020240909040333:f969626e",
"product_id": "redhat-ds:11:8080020240909040333:f969626e",
"product_identification_helper": {
"purl": "pkg:rpmmod/redhat/redhat-ds@11:8080020240909040333:f969626e"
}
}
},
{
"category": "product_version",
"name": "cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch",
"product": {
"name": "cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch",
"product_id": "cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cockpit-389-ds@1.4.3.34-4.module%2Bel8dsrv%2B22274%2Ba8abd89c?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch",
"product": {
"name": "python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch",
"product_id": "python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-lib389@1.4.3.34-4.module%2Bel8dsrv%2B22274%2Ba8abd89c?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src",
"product": {
"name": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src",
"product_id": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.34-4.module%2Bel8dsrv%2B22274%2Ba8abd89c?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product": {
"name": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product_id": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.34-4.module%2Bel8dsrv%2B22274%2Ba8abd89c?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product_id": "389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.34-4.module%2Bel8dsrv%2B22274%2Ba8abd89c?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product_id": "389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.34-4.module%2Bel8dsrv%2B22274%2Ba8abd89c?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product": {
"name": "389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product_id": "389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.34-4.module%2Bel8dsrv%2B22274%2Ba8abd89c?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.34-4.module%2Bel8dsrv%2B22274%2Ba8abd89c?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.34-4.module%2Bel8dsrv%2B22274%2Ba8abd89c?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product": {
"name": "389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product_id": "389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.34-4.module%2Bel8dsrv%2B22274%2Ba8abd89c?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.34-4.module%2Bel8dsrv%2B22274%2Ba8abd89c?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product_id": "389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.34-4.module%2Bel8dsrv%2B22274%2Ba8abd89c?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.34-4.module%2Bel8dsrv%2B22274%2Ba8abd89c?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "redhat-ds:11:8080020240909040333:f969626e as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e"
},
"product_reference": "redhat-ds:11:8080020240909040333:f969626e",
"relates_to_product_reference": "8Base-DirSrv-11.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src as a component of redhat-ds:11:8080020240909040333:f969626e as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src"
},
"product_reference": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src",
"relates_to_product_reference": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 as a component of redhat-ds:11:8080020240909040333:f969626e as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64"
},
"product_reference": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 as a component of redhat-ds:11:8080020240909040333:f969626e as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 as a component of redhat-ds:11:8080020240909040333:f969626e as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 as a component of redhat-ds:11:8080020240909040333:f969626e as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 as a component of redhat-ds:11:8080020240909040333:f969626e as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 as a component of redhat-ds:11:8080020240909040333:f969626e as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 as a component of redhat-ds:11:8080020240909040333:f969626e as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 as a component of redhat-ds:11:8080020240909040333:f969626e as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 as a component of redhat-ds:11:8080020240909040333:f969626e as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 as a component of redhat-ds:11:8080020240909040333:f969626e as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch as a component of redhat-ds:11:8080020240909040333:f969626e as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch"
},
"product_reference": "cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch",
"relates_to_product_reference": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch as a component of redhat-ds:11:8080020240909040333:f969626e as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch"
},
"product_reference": "python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch",
"relates_to_product_reference": "8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-3657",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-04-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2274401"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is categorized as an important severity issue rather than a critical one because, while it can cause a denial of service by stopping the directory service, it does not allow for remote code execution, privilege escalation, or data exfiltration. The impact is limited to service disruption, which can be mitigated by monitoring and automatic service restarts. Additionally, exploiting this vulnerability requires specific crafted packets, indicating that an attacker would need a certain level of knowledge and access to execute the attack, reducing the likelihood of widespread exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "RHBZ#2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-3657",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3657"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-09-11T06:38:09+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:6576"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request"
},
{
"acknowledgments": [
{
"names": [
"T\u00eako Mihinto"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2024-5953",
"cwe": {
"id": "CWE-1288",
"name": "Improper Validation of Consistency within Input"
},
"discovery_date": "2024-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2292104"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: Malformed userPassword hash may cause Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "LDAP servers are not usually exposed to the open internet, requiring adjacent connectivity for a successful attack. This issue also requires a compromised user account to perform the attack. Therefore, this flaw is rated as a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-5953"
},
{
"category": "external",
"summary": "RHBZ#2292104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292104"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-5953",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5953"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-5953",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5953"
}
],
"release_date": "2024-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-09-11T06:38:09+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:6576"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch",
"8Base-DirSrv-11.7:redhat-ds:11:8080020240909040333:f969626e:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: Malformed userPassword hash may cause Denial of Service"
}
]
}
RHSA-2024_4092
Vulnerability from csaf_redhat - Published: 2024-06-25 11:13 - Updated: 2024-11-28 17:20Summary
Red Hat Security Advisory: redhat-ds:12 security, bug fix update
Notes
Topic
An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12.4 for RHEL 9.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.
Details
Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration.
Security Fix(es):
* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657) (2267976)
* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199) (2274401)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* One level scoped search now returns a subsuffix correctly (BZ#2292903)
* Improved performance of filter component evaluation when tested against a large value set, such as group members (BZ#2293001)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12.4 for RHEL 9.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration.\n\nSecurity Fix(es):\n\n* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657) (2267976)\n\n* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199) (2274401)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* One level scoped search now returns a subsuffix correctly (BZ#2292903)\n\n* Improved performance of filter component evaluation when tested against a large value set, such as group members (BZ#2293001)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:4092",
"url": "https://access.redhat.com/errata/RHSA-2024:4092"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "2292903",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292903"
},
{
"category": "external",
"summary": "2293001",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293001"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4092.json"
}
],
"title": "Red Hat Security Advisory: redhat-ds:12 security, bug fix update",
"tracking": {
"current_release_date": "2024-11-28T17:20:32+00:00",
"generator": {
"date": "2024-11-28T17:20:32+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2024:4092",
"initial_release_date": "2024-06-25T11:13:51+00:00",
"revision_history": [
{
"date": "2024-06-25T11:13:51+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-06-25T11:13:51+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-28T17:20:32+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Directory Server 12.4 for RHEL 9",
"product": {
"name": "Red Hat Directory Server 12.4 for RHEL 9",
"product_id": "9Base-DirSrv-12.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:directory_server:12.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Directory Server"
},
{
"branches": [
{
"category": "product_version",
"name": "redhat-ds:12:9040020240604143706:1674d574",
"product": {
"name": "redhat-ds:12:9040020240604143706:1674d574",
"product_id": "redhat-ds:12:9040020240604143706:1674d574",
"product_identification_helper": {
"purl": "pkg:rpmmod/redhat/redhat-ds@12:9040020240604143706:1674d574"
}
}
},
{
"category": "product_version",
"name": "cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch",
"product": {
"name": "cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch",
"product_id": "cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cockpit-389-ds@2.4.5-4.module%2Bel9dsrv%2B21964%2Bc7e95493?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch",
"product": {
"name": "python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch",
"product_id": "python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-lib389@2.4.5-4.module%2Bel9dsrv%2B21964%2Bc7e95493?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src",
"product": {
"name": "389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src",
"product_id": "389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.4.5-4.module%2Bel9dsrv%2B21964%2Bc7e95493?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"product": {
"name": "389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"product_id": "389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.4.5-4.module%2Bel9dsrv%2B21964%2Bc7e95493?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"product": {
"name": "389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"product_id": "389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@2.4.5-4.module%2Bel9dsrv%2B21964%2Bc7e95493?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"product": {
"name": "389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"product_id": "389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@2.4.5-4.module%2Bel9dsrv%2B21964%2Bc7e95493?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"product": {
"name": "389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"product_id": "389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@2.4.5-4.module%2Bel9dsrv%2B21964%2Bc7e95493?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"product": {
"name": "389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"product_id": "389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@2.4.5-4.module%2Bel9dsrv%2B21964%2Bc7e95493?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"product": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"product_id": "389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@2.4.5-4.module%2Bel9dsrv%2B21964%2Bc7e95493?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"product": {
"name": "389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"product_id": "389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@2.4.5-4.module%2Bel9dsrv%2B21964%2Bc7e95493?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"product_id": "389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@2.4.5-4.module%2Bel9dsrv%2B21964%2Bc7e95493?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "redhat-ds:12:9040020240604143706:1674d574 as a component of Red Hat Directory Server 12.4 for RHEL 9",
"product_id": "9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574"
},
"product_reference": "redhat-ds:12:9040020240604143706:1674d574",
"relates_to_product_reference": "9Base-DirSrv-12.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src as a component of redhat-ds:12:9040020240604143706:1674d574 as a component of Red Hat Directory Server 12.4 for RHEL 9",
"product_id": "9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src"
},
"product_reference": "389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src",
"relates_to_product_reference": "9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64 as a component of redhat-ds:12:9040020240604143706:1674d574 as a component of Red Hat Directory Server 12.4 for RHEL 9",
"product_id": "9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64"
},
"product_reference": "389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"relates_to_product_reference": "9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64 as a component of redhat-ds:12:9040020240604143706:1674d574 as a component of Red Hat Directory Server 12.4 for RHEL 9",
"product_id": "9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"relates_to_product_reference": "9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64 as a component of redhat-ds:12:9040020240604143706:1674d574 as a component of Red Hat Directory Server 12.4 for RHEL 9",
"product_id": "9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64"
},
"product_reference": "389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"relates_to_product_reference": "9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64 as a component of redhat-ds:12:9040020240604143706:1674d574 as a component of Red Hat Directory Server 12.4 for RHEL 9",
"product_id": "9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64"
},
"product_reference": "389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"relates_to_product_reference": "9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64 as a component of redhat-ds:12:9040020240604143706:1674d574 as a component of Red Hat Directory Server 12.4 for RHEL 9",
"product_id": "9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64"
},
"product_reference": "389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"relates_to_product_reference": "9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64 as a component of redhat-ds:12:9040020240604143706:1674d574 as a component of Red Hat Directory Server 12.4 for RHEL 9",
"product_id": "9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"relates_to_product_reference": "9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64 as a component of redhat-ds:12:9040020240604143706:1674d574 as a component of Red Hat Directory Server 12.4 for RHEL 9",
"product_id": "9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64"
},
"product_reference": "389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"relates_to_product_reference": "9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64 as a component of redhat-ds:12:9040020240604143706:1674d574 as a component of Red Hat Directory Server 12.4 for RHEL 9",
"product_id": "9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"relates_to_product_reference": "9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch as a component of redhat-ds:12:9040020240604143706:1674d574 as a component of Red Hat Directory Server 12.4 for RHEL 9",
"product_id": "9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch"
},
"product_reference": "cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch",
"relates_to_product_reference": "9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch as a component of redhat-ds:12:9040020240604143706:1674d574 as a component of Red Hat Directory Server 12.4 for RHEL 9",
"product_id": "9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch"
},
"product_reference": "python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch",
"relates_to_product_reference": "9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-2199",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-03-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2267976"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "LDAP servers are not usually exposed to the open internet, requiring adjacent connectivity for a successful attack. This issue also requires a compromised user account to perform the attack. Therefore, this flaw is rated as a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-2199"
},
{
"category": "external",
"summary": "RHBZ#2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-2199",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2199"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-06-25T11:13:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4092"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c"
},
{
"cve": "CVE-2024-3657",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-04-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2274401"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is categorized as an important severity issue rather than a critical one because, while it can cause a denial of service by stopping the directory service, it does not allow for remote code execution, privilege escalation, or data exfiltration. The impact is limited to service disruption, which can be mitigated by monitoring and automatic service restarts. Additionally, exploiting this vulnerability requires specific crafted packets, indicating that an attacker would need a certain level of knowledge and access to execute the attack, reducing the likelihood of widespread exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "RHBZ#2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-3657",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3657"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-06-25T11:13:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4092"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch",
"9Base-DirSrv-12.4:redhat-ds:12:9040020240604143706:1674d574:python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request"
}
]
}
RHSA-2024_4209
Vulnerability from csaf_redhat - Published: 2024-07-02 08:02 - Updated: 2024-12-04 14:25Summary
Red Hat Security Advisory: redhat-ds:11 security and bug fix update
Notes
Topic
An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.2 for RHEL 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration.
Security Fix(s):
* 389-ds-base: Potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657) (BZ#2274401)
* 389-ds-base: Authenticated user can cause a server failure while modifying `userPassword` using malformed input (CVE-2024-2199) (BZ#2267976)
* 389-ds-base: Denial of service when writing a value larger than 256 chars in log_entry_attr (CVE-2024-1062) (BZ#2261879)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug fix(es):
* Directory Server now flushes the entry cache less frequently (BZ#2268177)
* The `ns-slapd` binary is now linked with the thread-safe `libldap_r` library, no longer causing segmentation fault (BZ#2264534)
Users of Red Hat Directory Server 11 are advised to install these updated packages.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.2 for RHEL 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration.\n\nSecurity Fix(s):\n* 389-ds-base: Potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657) (BZ#2274401)\n\n* 389-ds-base: Authenticated user can cause a server failure while modifying `userPassword` using malformed input (CVE-2024-2199) (BZ#2267976)\n\n* 389-ds-base: Denial of service when writing a value larger than 256 chars in log_entry_attr (CVE-2024-1062) (BZ#2261879)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug fix(es):\n\n* Directory Server now flushes the entry cache less frequently (BZ#2268177)\n\n* The `ns-slapd` binary is now linked with the thread-safe `libldap_r` library, no longer causing segmentation fault (BZ#2264534)\n\nUsers of Red Hat Directory Server 11 are advised to install these updated packages.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:4209",
"url": "https://access.redhat.com/errata/RHSA-2024:4209"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2261879",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261879"
},
{
"category": "external",
"summary": "2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "2268183",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268183"
},
{
"category": "external",
"summary": "2274367",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274367"
},
{
"category": "external",
"summary": "2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4209.json"
}
],
"title": "Red Hat Security Advisory: redhat-ds:11 security and bug fix update",
"tracking": {
"current_release_date": "2024-12-04T14:25:11+00:00",
"generator": {
"date": "2024-12-04T14:25:11+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2024:4209",
"initial_release_date": "2024-07-02T08:02:32+00:00",
"revision_history": [
{
"date": "2024-07-02T08:02:32+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-07-02T08:02:33+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-04T14:25:11+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Directory Server 11.8 for RHEL 8",
"product": {
"name": "Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:directory_server:11.8::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Directory Server"
},
{
"branches": [
{
"category": "product_version",
"name": "redhat-ds:11:8090020240606122459:91529cd0",
"product": {
"name": "redhat-ds:11:8090020240606122459:91529cd0",
"product_id": "redhat-ds:11:8090020240606122459:91529cd0",
"product_identification_helper": {
"purl": "pkg:rpmmod/redhat/redhat-ds@11:8090020240606122459:91529cd0"
}
}
},
{
"category": "product_version",
"name": "cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch",
"product": {
"name": "cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch",
"product_id": "cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cockpit-389-ds@1.4.3.37-10.module%2Bel8dsrv%2B21971%2Bf7435891?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch",
"product": {
"name": "python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch",
"product_id": "python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-lib389@1.4.3.37-10.module%2Bel8dsrv%2B21971%2Bf7435891?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src",
"product": {
"name": "389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src",
"product_id": "389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.37-10.module%2Bel8dsrv%2B21971%2Bf7435891?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product": {
"name": "389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product_id": "389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.37-10.module%2Bel8dsrv%2B21971%2Bf7435891?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product_id": "389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.37-10.module%2Bel8dsrv%2B21971%2Bf7435891?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product_id": "389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.37-10.module%2Bel8dsrv%2B21971%2Bf7435891?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product": {
"name": "389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product_id": "389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.37-10.module%2Bel8dsrv%2B21971%2Bf7435891?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.37-10.module%2Bel8dsrv%2B21971%2Bf7435891?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.37-10.module%2Bel8dsrv%2B21971%2Bf7435891?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product": {
"name": "389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product_id": "389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.37-10.module%2Bel8dsrv%2B21971%2Bf7435891?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.37-10.module%2Bel8dsrv%2B21971%2Bf7435891?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product_id": "389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.37-10.module%2Bel8dsrv%2B21971%2Bf7435891?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.37-10.module%2Bel8dsrv%2B21971%2Bf7435891?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "redhat-ds:11:8090020240606122459:91529cd0 as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0"
},
"product_reference": "redhat-ds:11:8090020240606122459:91529cd0",
"relates_to_product_reference": "8Base-DirSrv-11.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src as a component of redhat-ds:11:8090020240606122459:91529cd0 as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src"
},
"product_reference": "389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src",
"relates_to_product_reference": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 as a component of redhat-ds:11:8090020240606122459:91529cd0 as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64"
},
"product_reference": "389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 as a component of redhat-ds:11:8090020240606122459:91529cd0 as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 as a component of redhat-ds:11:8090020240606122459:91529cd0 as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 as a component of redhat-ds:11:8090020240606122459:91529cd0 as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 as a component of redhat-ds:11:8090020240606122459:91529cd0 as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 as a component of redhat-ds:11:8090020240606122459:91529cd0 as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 as a component of redhat-ds:11:8090020240606122459:91529cd0 as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 as a component of redhat-ds:11:8090020240606122459:91529cd0 as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 as a component of redhat-ds:11:8090020240606122459:91529cd0 as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 as a component of redhat-ds:11:8090020240606122459:91529cd0 as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch as a component of redhat-ds:11:8090020240606122459:91529cd0 as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch"
},
"product_reference": "cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch",
"relates_to_product_reference": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch as a component of redhat-ds:11:8090020240606122459:91529cd0 as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch"
},
"product_reference": "python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch",
"relates_to_product_reference": "8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-1062",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2024-01-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2261879"
}
],
"notes": [
{
"category": "description",
"text": "A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-1062"
},
{
"category": "external",
"summary": "RHBZ#2261879",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261879"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-1062",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-1062"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-1062",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1062"
},
{
"category": "external",
"summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2256711",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256711"
}
],
"release_date": "2024-01-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-07-02T08:02:32+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4209"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)"
},
{
"cve": "CVE-2024-2199",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-03-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2267976"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "LDAP servers are not usually exposed to the open internet, requiring adjacent connectivity for a successful attack. This issue also requires a compromised user account to perform the attack. Therefore, this flaw is rated as a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-2199"
},
{
"category": "external",
"summary": "RHBZ#2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-2199",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2199"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-07-02T08:02:32+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4209"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c"
},
{
"cve": "CVE-2024-3657",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-04-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2274401"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is categorized as an important severity issue rather than a critical one because, while it can cause a denial of service by stopping the directory service, it does not allow for remote code execution, privilege escalation, or data exfiltration. The impact is limited to service disruption, which can be mitigated by monitoring and automatic service restarts. Additionally, exploiting this vulnerability requires specific crafted packets, indicating that an attacker would need a certain level of knowledge and access to execute the attack, reducing the likelihood of widespread exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "RHBZ#2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-3657",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3657"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-07-02T08:02:32+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4209"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch",
"8Base-DirSrv-11.8:redhat-ds:11:8090020240606122459:91529cd0:python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request"
}
]
}
RHSA-2024:4235
Vulnerability from csaf_redhat - Published: 2024-07-02 15:38 - Updated: 2025-11-21 19:04Summary
Red Hat Security Advisory: 389-ds security update
Notes
Topic
An update for 389-ds is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.
Security Fix(es):
* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)
* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for 389-ds is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. \n\nSecurity Fix(es):\n\n* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)\n\n* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:4235",
"url": "https://access.redhat.com/errata/RHSA-2024:4235"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "RHEL-16277",
"url": "https://issues.redhat.com/browse/RHEL-16277"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4235.json"
}
],
"title": "Red Hat Security Advisory: 389-ds security update",
"tracking": {
"current_release_date": "2025-11-21T19:04:56+00:00",
"generator": {
"date": "2025-11-21T19:04:56+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2024:4235",
"initial_release_date": "2024-07-02T15:38:55+00:00",
"revision_history": [
{
"date": "2024-07-02T15:38:55+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-07-02T15:38:55+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T19:04:56+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src::389-ds:1.4",
"product": {
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src (389-ds:1.4)",
"product_id": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=src\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=x86_64\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=x86_64\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=x86_64\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=x86_64\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=x86_64\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=x86_64\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=x86_64\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=x86_64\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=x86_64\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=x86_64\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch::389-ds:1.4",
"product": {
"name": "python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch (389-ds:1.4)",
"product_id": "python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-lib389@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=noarch\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x (389-ds:1.4)",
"product_id": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=s390x\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x (389-ds:1.4)",
"product_id": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=s390x\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x (389-ds:1.4)",
"product_id": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=s390x\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x (389-ds:1.4)",
"product_id": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=s390x\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x (389-ds:1.4)",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=s390x\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x (389-ds:1.4)",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=s390x\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x (389-ds:1.4)",
"product_id": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=s390x\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x (389-ds:1.4)",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=s390x\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x (389-ds:1.4)",
"product_id": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=s390x\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x (389-ds:1.4)",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=s390x\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=ppc64le\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=ppc64le\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=ppc64le\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=ppc64le\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=ppc64le\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=ppc64le\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=ppc64le\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=ppc64le\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=ppc64le\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=ppc64le\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=aarch64\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=aarch64\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=aarch64\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=aarch64\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=aarch64\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=aarch64\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=aarch64\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=aarch64\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=aarch64\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=aarch64\u0026rpmmod=389-ds:1.4:8100020240613122040:25e700aa"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src::389-ds:1.4"
},
"product_reference": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch::389-ds:1.4"
},
"product_reference": "python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-2199",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-03-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2267976"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "LDAP servers are not usually exposed to the open internet, requiring adjacent connectivity for a successful attack. This issue also requires a compromised user account to perform the attack. Therefore, this flaw is rated as a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch::389-ds:1.4"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-2199"
},
{
"category": "external",
"summary": "RHBZ#2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-2199",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2199"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-07-02T15:38:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch::389-ds:1.4"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4235"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch::389-ds:1.4"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch::389-ds:1.4"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c"
},
{
"cve": "CVE-2024-3657",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-04-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2274401"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is categorized as an important severity issue rather than a critical one because, while it can cause a denial of service by stopping the directory service, it does not allow for remote code execution, privilege escalation, or data exfiltration. The impact is limited to service disruption, which can be mitigated by monitoring and automatic service restarts. Additionally, exploiting this vulnerability requires specific crafted packets, indicating that an attacker would need a certain level of knowledge and access to execute the attack, reducing the likelihood of widespread exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch::389-ds:1.4"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "RHBZ#2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-3657",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3657"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-07-02T15:38:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch::389-ds:1.4"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4235"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch::389-ds:1.4"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch::389-ds:1.4"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request"
}
]
}
RHSA-2024:3837
Vulnerability from csaf_redhat - Published: 2024-06-11 19:53 - Updated: 2025-11-21 19:04Summary
Red Hat Security Advisory: 389-ds-base security update
Notes
Topic
An update for 389-ds-base is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of
Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base
packages include the Lightweight Directory Access Protocol (LDAP) server and
command-line utilities for server administration.
Security Fix(es):
* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)
* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for 389-ds-base is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of\nImportant. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base\npackages include the Lightweight Directory Access Protocol (LDAP) server and\ncommand-line utilities for server administration.\n\nSecurity Fix(es):\n\n* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)\n\n* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:3837",
"url": "https://access.redhat.com/errata/RHSA-2024:3837"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3837.json"
}
],
"title": "Red Hat Security Advisory: 389-ds-base security update",
"tracking": {
"current_release_date": "2025-11-21T19:04:02+00:00",
"generator": {
"date": "2025-11-21T19:04:02+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2024:3837",
"initial_release_date": "2024-06-11T19:53:52+00:00",
"revision_history": [
{
"date": "2024-06-11T19:53:52+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-06-11T19:53:52+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T19:04:02+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux CRB (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::crb"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.4.5-8.el9_4.src",
"product": {
"name": "389-ds-base-0:2.4.5-8.el9_4.src",
"product_id": "389-ds-base-0:2.4.5-8.el9_4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.4.5-8.el9_4?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.4.5-8.el9_4.aarch64",
"product": {
"name": "389-ds-base-0:2.4.5-8.el9_4.aarch64",
"product_id": "389-ds-base-0:2.4.5-8.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.4.5-8.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"product": {
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"product_id": "389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@2.4.5-8.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"product": {
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"product_id": "389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@2.4.5-8.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"product": {
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"product_id": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@2.4.5-8.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"product": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"product_id": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@2.4.5-8.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"product_id": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@2.4.5-8.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"product": {
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"product_id": "389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@2.4.5-8.el9_4?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"product": {
"name": "389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"product_id": "389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.4.5-8.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"product": {
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"product_id": "389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@2.4.5-8.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"product": {
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"product_id": "389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@2.4.5-8.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"product": {
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"product_id": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@2.4.5-8.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"product": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"product_id": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@2.4.5-8.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"product_id": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@2.4.5-8.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"product": {
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"product_id": "389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@2.4.5-8.el9_4?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.4.5-8.el9_4.x86_64",
"product": {
"name": "389-ds-base-0:2.4.5-8.el9_4.x86_64",
"product_id": "389-ds-base-0:2.4.5-8.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.4.5-8.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"product": {
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"product_id": "389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@2.4.5-8.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"product": {
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"product_id": "389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@2.4.5-8.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"product": {
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"product_id": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@2.4.5-8.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"product": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"product_id": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@2.4.5-8.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"product_id": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@2.4.5-8.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"product": {
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"product_id": "389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@2.4.5-8.el9_4?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.4.5-8.el9_4.s390x",
"product": {
"name": "389-ds-base-0:2.4.5-8.el9_4.s390x",
"product_id": "389-ds-base-0:2.4.5-8.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.4.5-8.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"product": {
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"product_id": "389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@2.4.5-8.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"product": {
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"product_id": "389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@2.4.5-8.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"product": {
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"product_id": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@2.4.5-8.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"product": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"product_id": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@2.4.5-8.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"product_id": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@2.4.5-8.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"product": {
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"product_id": "389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@2.4.5-8.el9_4?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-lib389-0:2.4.5-8.el9_4.noarch",
"product": {
"name": "python3-lib389-0:2.4.5-8.el9_4.noarch",
"product_id": "python3-lib389-0:2.4.5-8.el9_4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-lib389@2.4.5-8.el9_4?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.4.5-8.el9_4.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src"
},
"product_reference": "389-ds-base-0:2.4.5-8.el9_4.src",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-lib389-0:2.4.5-8.el9_4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch"
},
"product_reference": "python3-lib389-0:2.4.5-8.el9_4.noarch",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.4.5-8.el9_4.src as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src"
},
"product_reference": "389-ds-base-0:2.4.5-8.el9_4.src",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-lib389-0:2.4.5-8.el9_4.noarch as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch"
},
"product_reference": "python3-lib389-0:2.4.5-8.el9_4.noarch",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-2199",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-03-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2267976"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "LDAP servers are not usually exposed to the open internet, requiring adjacent connectivity for a successful attack. This issue also requires a compromised user account to perform the attack. Therefore, this flaw is rated as a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-2199"
},
{
"category": "external",
"summary": "RHBZ#2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-2199",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2199"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-06-11T19:53:52+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:3837"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c"
},
{
"cve": "CVE-2024-3657",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-04-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2274401"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is categorized as an important severity issue rather than a critical one because, while it can cause a denial of service by stopping the directory service, it does not allow for remote code execution, privilege escalation, or data exfiltration. The impact is limited to service disruption, which can be mitigated by monitoring and automatic service restarts. Additionally, exploiting this vulnerability requires specific crafted packets, indicating that an attacker would need a certain level of knowledge and access to execute the attack, reducing the likelihood of widespread exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "RHBZ#2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-3657",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3657"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-06-11T19:53:52+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:3837"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request"
}
]
}
RHSA-2024_4633
Vulnerability from csaf_redhat - Published: 2024-07-18 15:21 - Updated: 2024-12-04 14:26Summary
Red Hat Security Advisory: 389-ds-base security update
Notes
Topic
An update for 389-ds-base is now available for Red Hat Enterprise Linux 9.2 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.
Security Fix(es):
* 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) (CVE-2024-1062)
* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)
* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)
* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for 389-ds-base is now available for Red Hat Enterprise Linux 9.2 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.\n\nSecurity Fix(es):\n\n* 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) (CVE-2024-1062)\n\n* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)\n\n* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)\n\n* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:4633",
"url": "https://access.redhat.com/errata/RHSA-2024:4633"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2261879",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261879"
},
{
"category": "external",
"summary": "2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "2292104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292104"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4633.json"
}
],
"title": "Red Hat Security Advisory: 389-ds-base security update",
"tracking": {
"current_release_date": "2024-12-04T14:26:01+00:00",
"generator": {
"date": "2024-12-04T14:26:01+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2024:4633",
"initial_release_date": "2024-07-18T15:21:55+00:00",
"revision_history": [
{
"date": "2024-07-18T15:21:55+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-07-18T15:21:55+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-04T14:26:01+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.2::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.2.4-9.el9_2.src",
"product": {
"name": "389-ds-base-0:2.2.4-9.el9_2.src",
"product_id": "389-ds-base-0:2.2.4-9.el9_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.2.4-9.el9_2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.2.4-9.el9_2.aarch64",
"product": {
"name": "389-ds-base-0:2.2.4-9.el9_2.aarch64",
"product_id": "389-ds-base-0:2.2.4-9.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.2.4-9.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"product": {
"name": "389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"product_id": "389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@2.2.4-9.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"product": {
"name": "389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"product_id": "389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@2.2.4-9.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"product": {
"name": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"product_id": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@2.2.4-9.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"product": {
"name": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"product_id": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@2.2.4-9.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"product_id": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@2.2.4-9.el9_2?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"product": {
"name": "389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"product_id": "389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.2.4-9.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"product": {
"name": "389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"product_id": "389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@2.2.4-9.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"product": {
"name": "389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"product_id": "389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@2.2.4-9.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"product": {
"name": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"product_id": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@2.2.4-9.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"product": {
"name": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"product_id": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@2.2.4-9.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"product_id": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@2.2.4-9.el9_2?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.2.4-9.el9_2.x86_64",
"product": {
"name": "389-ds-base-0:2.2.4-9.el9_2.x86_64",
"product_id": "389-ds-base-0:2.2.4-9.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.2.4-9.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"product": {
"name": "389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"product_id": "389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@2.2.4-9.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"product": {
"name": "389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"product_id": "389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@2.2.4-9.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"product": {
"name": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"product_id": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@2.2.4-9.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"product": {
"name": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"product_id": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@2.2.4-9.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"product_id": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@2.2.4-9.el9_2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.2.4-9.el9_2.s390x",
"product": {
"name": "389-ds-base-0:2.2.4-9.el9_2.s390x",
"product_id": "389-ds-base-0:2.2.4-9.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.2.4-9.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"product": {
"name": "389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"product_id": "389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@2.2.4-9.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"product": {
"name": "389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"product_id": "389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@2.2.4-9.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"product": {
"name": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"product_id": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@2.2.4-9.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"product": {
"name": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"product_id": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@2.2.4-9.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"product_id": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@2.2.4-9.el9_2?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-lib389-0:2.2.4-9.el9_2.noarch",
"product": {
"name": "python3-lib389-0:2.2.4-9.el9_2.noarch",
"product_id": "python3-lib389-0:2.2.4-9.el9_2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-lib389@2.2.4-9.el9_2?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.2.4-9.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64"
},
"product_reference": "389-ds-base-0:2.2.4-9.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.2.4-9.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le"
},
"product_reference": "389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.2.4-9.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x"
},
"product_reference": "389-ds-base-0:2.2.4-9.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.2.4-9.el9_2.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src"
},
"product_reference": "389-ds-base-0:2.2.4-9.el9_2.src",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.2.4-9.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64"
},
"product_reference": "389-ds-base-0:2.2.4-9.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64"
},
"product_reference": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x"
},
"product_reference": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64"
},
"product_reference": "389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le"
},
"product_reference": "389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x"
},
"product_reference": "389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64"
},
"product_reference": "389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.2.4-9.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64"
},
"product_reference": "389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le"
},
"product_reference": "389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.2.4-9.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x"
},
"product_reference": "389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.2.4-9.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64"
},
"product_reference": "389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-lib389-0:2.2.4-9.el9_2.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
},
"product_reference": "python3-lib389-0:2.2.4-9.el9_2.noarch",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-1062",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2024-01-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2261879"
}
],
"notes": [
{
"category": "description",
"text": "A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-1062"
},
{
"category": "external",
"summary": "RHBZ#2261879",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261879"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-1062",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-1062"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-1062",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1062"
},
{
"category": "external",
"summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2256711",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256711"
}
],
"release_date": "2024-01-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-07-18T15:21:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the 389 server service will be restarted automatically.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4633"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)"
},
{
"cve": "CVE-2024-2199",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-03-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2267976"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "LDAP servers are not usually exposed to the open internet, requiring adjacent connectivity for a successful attack. This issue also requires a compromised user account to perform the attack. Therefore, this flaw is rated as a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-2199"
},
{
"category": "external",
"summary": "RHBZ#2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-2199",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2199"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-07-18T15:21:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the 389 server service will be restarted automatically.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4633"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c"
},
{
"cve": "CVE-2024-3657",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-04-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2274401"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is categorized as an important severity issue rather than a critical one because, while it can cause a denial of service by stopping the directory service, it does not allow for remote code execution, privilege escalation, or data exfiltration. The impact is limited to service disruption, which can be mitigated by monitoring and automatic service restarts. Additionally, exploiting this vulnerability requires specific crafted packets, indicating that an attacker would need a certain level of knowledge and access to execute the attack, reducing the likelihood of widespread exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "RHBZ#2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-3657",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3657"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-07-18T15:21:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the 389 server service will be restarted automatically.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4633"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request"
},
{
"acknowledgments": [
{
"names": [
"T\u00eako Mihinto"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2024-5953",
"cwe": {
"id": "CWE-1288",
"name": "Improper Validation of Consistency within Input"
},
"discovery_date": "2024-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2292104"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: Malformed userPassword hash may cause Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "LDAP servers are not usually exposed to the open internet, requiring adjacent connectivity for a successful attack. This issue also requires a compromised user account to perform the attack. Therefore, this flaw is rated as a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-5953"
},
{
"category": "external",
"summary": "RHBZ#2292104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292104"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-5953",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5953"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-5953",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5953"
}
],
"release_date": "2024-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-07-18T15:21:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the 389 server service will be restarted automatically.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4633"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: Malformed userPassword hash may cause Denial of Service"
}
]
}
RHSA-2024:4092
Vulnerability from csaf_redhat - Published: 2024-06-25 11:13 - Updated: 2025-11-21 19:04Summary
Red Hat Security Advisory: redhat-ds:12 security, bug fix update
Notes
Topic
An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12.4 for RHEL 9.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.
Details
Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration.
Security Fix(es):
* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657) (2267976)
* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199) (2274401)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* One level scoped search now returns a subsuffix correctly (BZ#2292903)
* Improved performance of filter component evaluation when tested against a large value set, such as group members (BZ#2293001)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12.4 for RHEL 9.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration.\n\nSecurity Fix(es):\n\n* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657) (2267976)\n\n* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199) (2274401)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* One level scoped search now returns a subsuffix correctly (BZ#2292903)\n\n* Improved performance of filter component evaluation when tested against a large value set, such as group members (BZ#2293001)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:4092",
"url": "https://access.redhat.com/errata/RHSA-2024:4092"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "2292903",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292903"
},
{
"category": "external",
"summary": "2293001",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293001"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4092.json"
}
],
"title": "Red Hat Security Advisory: redhat-ds:12 security, bug fix update",
"tracking": {
"current_release_date": "2025-11-21T19:04:32+00:00",
"generator": {
"date": "2025-11-21T19:04:32+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2024:4092",
"initial_release_date": "2024-06-25T11:13:51+00:00",
"revision_history": [
{
"date": "2024-06-25T11:13:51+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-06-25T11:13:51+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T19:04:32+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Directory Server 12.4 for RHEL 9",
"product": {
"name": "Red Hat Directory Server 12.4 for RHEL 9",
"product_id": "9Base-DirSrv-12.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:directory_server:12.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Directory Server"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src::redhat-ds:12",
"product": {
"name": "389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src (redhat-ds:12)",
"product_id": "389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src::redhat-ds:12",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.4.5-4.module%2Bel9dsrv%2B21964%2Bc7e95493?arch=src\u0026rpmmod=redhat-ds:12:9040020240604143706:1674d574"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"product": {
"name": "389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64 (redhat-ds:12)",
"product_id": "389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.4.5-4.module%2Bel9dsrv%2B21964%2Bc7e95493?arch=x86_64\u0026rpmmod=redhat-ds:12:9040020240604143706:1674d574"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"product": {
"name": "389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64 (redhat-ds:12)",
"product_id": "389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@2.4.5-4.module%2Bel9dsrv%2B21964%2Bc7e95493?arch=x86_64\u0026rpmmod=redhat-ds:12:9040020240604143706:1674d574"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"product": {
"name": "389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64 (redhat-ds:12)",
"product_id": "389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@2.4.5-4.module%2Bel9dsrv%2B21964%2Bc7e95493?arch=x86_64\u0026rpmmod=redhat-ds:12:9040020240604143706:1674d574"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"product": {
"name": "389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64 (redhat-ds:12)",
"product_id": "389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@2.4.5-4.module%2Bel9dsrv%2B21964%2Bc7e95493?arch=x86_64\u0026rpmmod=redhat-ds:12:9040020240604143706:1674d574"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"product": {
"name": "389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64 (redhat-ds:12)",
"product_id": "389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@2.4.5-4.module%2Bel9dsrv%2B21964%2Bc7e95493?arch=x86_64\u0026rpmmod=redhat-ds:12:9040020240604143706:1674d574"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"product": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64 (redhat-ds:12)",
"product_id": "389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@2.4.5-4.module%2Bel9dsrv%2B21964%2Bc7e95493?arch=x86_64\u0026rpmmod=redhat-ds:12:9040020240604143706:1674d574"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"product": {
"name": "389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64 (redhat-ds:12)",
"product_id": "389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@2.4.5-4.module%2Bel9dsrv%2B21964%2Bc7e95493?arch=x86_64\u0026rpmmod=redhat-ds:12:9040020240604143706:1674d574"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64 (redhat-ds:12)",
"product_id": "389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@2.4.5-4.module%2Bel9dsrv%2B21964%2Bc7e95493?arch=x86_64\u0026rpmmod=redhat-ds:12:9040020240604143706:1674d574"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch::redhat-ds:12",
"product": {
"name": "cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch (redhat-ds:12)",
"product_id": "cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch::redhat-ds:12",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cockpit-389-ds@2.4.5-4.module%2Bel9dsrv%2B21964%2Bc7e95493?arch=noarch\u0026rpmmod=redhat-ds:12:9040020240604143706:1674d574"
}
}
},
{
"category": "product_version",
"name": "python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch::redhat-ds:12",
"product": {
"name": "python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch (redhat-ds:12)",
"product_id": "python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch::redhat-ds:12",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-lib389@2.4.5-4.module%2Bel9dsrv%2B21964%2Bc7e95493?arch=noarch\u0026rpmmod=redhat-ds:12:9040020240604143706:1674d574"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src (redhat-ds:12) as a component of Red Hat Directory Server 12.4 for RHEL 9",
"product_id": "9Base-DirSrv-12.4:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src::redhat-ds:12"
},
"product_reference": "389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src::redhat-ds:12",
"relates_to_product_reference": "9Base-DirSrv-12.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64 (redhat-ds:12) as a component of Red Hat Directory Server 12.4 for RHEL 9",
"product_id": "9Base-DirSrv-12.4:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12"
},
"product_reference": "389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"relates_to_product_reference": "9Base-DirSrv-12.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64 (redhat-ds:12) as a component of Red Hat Directory Server 12.4 for RHEL 9",
"product_id": "9Base-DirSrv-12.4:389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12"
},
"product_reference": "389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"relates_to_product_reference": "9Base-DirSrv-12.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64 (redhat-ds:12) as a component of Red Hat Directory Server 12.4 for RHEL 9",
"product_id": "9Base-DirSrv-12.4:389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12"
},
"product_reference": "389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"relates_to_product_reference": "9Base-DirSrv-12.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64 (redhat-ds:12) as a component of Red Hat Directory Server 12.4 for RHEL 9",
"product_id": "9Base-DirSrv-12.4:389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12"
},
"product_reference": "389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"relates_to_product_reference": "9Base-DirSrv-12.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64 (redhat-ds:12) as a component of Red Hat Directory Server 12.4 for RHEL 9",
"product_id": "9Base-DirSrv-12.4:389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12"
},
"product_reference": "389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"relates_to_product_reference": "9Base-DirSrv-12.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64 (redhat-ds:12) as a component of Red Hat Directory Server 12.4 for RHEL 9",
"product_id": "9Base-DirSrv-12.4:389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"relates_to_product_reference": "9Base-DirSrv-12.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64 (redhat-ds:12) as a component of Red Hat Directory Server 12.4 for RHEL 9",
"product_id": "9Base-DirSrv-12.4:389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12"
},
"product_reference": "389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"relates_to_product_reference": "9Base-DirSrv-12.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64 (redhat-ds:12) as a component of Red Hat Directory Server 12.4 for RHEL 9",
"product_id": "9Base-DirSrv-12.4:389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"relates_to_product_reference": "9Base-DirSrv-12.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch (redhat-ds:12) as a component of Red Hat Directory Server 12.4 for RHEL 9",
"product_id": "9Base-DirSrv-12.4:cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch::redhat-ds:12"
},
"product_reference": "cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch::redhat-ds:12",
"relates_to_product_reference": "9Base-DirSrv-12.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch (redhat-ds:12) as a component of Red Hat Directory Server 12.4 for RHEL 9",
"product_id": "9Base-DirSrv-12.4:python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch::redhat-ds:12"
},
"product_reference": "python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch::redhat-ds:12",
"relates_to_product_reference": "9Base-DirSrv-12.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-2199",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-03-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2267976"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "LDAP servers are not usually exposed to the open internet, requiring adjacent connectivity for a successful attack. This issue also requires a compromised user account to perform the attack. Therefore, this flaw is rated as a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-DirSrv-12.4:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch::redhat-ds:12",
"9Base-DirSrv-12.4:python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch::redhat-ds:12"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-2199"
},
{
"category": "external",
"summary": "RHBZ#2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-2199",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2199"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-06-25T11:13:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-DirSrv-12.4:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch::redhat-ds:12",
"9Base-DirSrv-12.4:python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch::redhat-ds:12"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4092"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-DirSrv-12.4:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch::redhat-ds:12",
"9Base-DirSrv-12.4:python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch::redhat-ds:12"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-DirSrv-12.4:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch::redhat-ds:12",
"9Base-DirSrv-12.4:python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch::redhat-ds:12"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c"
},
{
"cve": "CVE-2024-3657",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-04-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2274401"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is categorized as an important severity issue rather than a critical one because, while it can cause a denial of service by stopping the directory service, it does not allow for remote code execution, privilege escalation, or data exfiltration. The impact is limited to service disruption, which can be mitigated by monitoring and automatic service restarts. Additionally, exploiting this vulnerability requires specific crafted packets, indicating that an attacker would need a certain level of knowledge and access to execute the attack, reducing the likelihood of widespread exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-DirSrv-12.4:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch::redhat-ds:12",
"9Base-DirSrv-12.4:python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch::redhat-ds:12"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "RHBZ#2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-3657",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3657"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-06-25T11:13:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-DirSrv-12.4:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch::redhat-ds:12",
"9Base-DirSrv-12.4:python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch::redhat-ds:12"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4092"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-DirSrv-12.4:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch::redhat-ds:12",
"9Base-DirSrv-12.4:python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch::redhat-ds:12"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-DirSrv-12.4:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.src::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-debugsource-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-devel-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-libs-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-libs-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-snmp-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:389-ds-base-snmp-debuginfo-0:2.4.5-4.module+el9dsrv+21964+c7e95493.x86_64::redhat-ds:12",
"9Base-DirSrv-12.4:cockpit-389-ds-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch::redhat-ds:12",
"9Base-DirSrv-12.4:python3-lib389-0:2.4.5-4.module+el9dsrv+21964+c7e95493.noarch::redhat-ds:12"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request"
}
]
}
RHSA-2024_7458
Vulnerability from csaf_redhat - Published: 2024-10-01 15:54 - Updated: 2024-12-04 14:24Summary
Red Hat Security Advisory: redhat-ds:12 security update
Notes
Topic
An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12 Extended Update Support for RHEL 9.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.
Details
Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration.
Security Fix(es):
* 389-ds-base: Denial of service when writing a value larger than 256 chars in
log_entry_attr (CVE-2024-1062) (BZ#2261879)
* 389-ds-base: Potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657) (BZ#2274401)
* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953) (BZ#2292104)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12 Extended Update Support for RHEL 9.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration.\n\nSecurity Fix(es):\n\n* 389-ds-base: Denial of service when writing a value larger than 256 chars in\nlog_entry_attr (CVE-2024-1062) (BZ#2261879)\n\n* 389-ds-base: Potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657) (BZ#2274401)\n\n* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953) (BZ#2292104)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:7458",
"url": "https://access.redhat.com/errata/RHSA-2024:7458"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2261879",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261879"
},
{
"category": "external",
"summary": "2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "2292104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292104"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7458.json"
}
],
"title": "Red Hat Security Advisory: redhat-ds:12 security update",
"tracking": {
"current_release_date": "2024-12-04T14:24:50+00:00",
"generator": {
"date": "2024-12-04T14:24:50+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2024:7458",
"initial_release_date": "2024-10-01T15:54:06+00:00",
"revision_history": [
{
"date": "2024-10-01T15:54:06+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-10-01T15:54:06+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-04T14:24:50+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Directory Server 12.2 EUS for RHEL 9",
"product": {
"name": "Red Hat Directory Server 12.2 EUS for RHEL 9",
"product_id": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:directory_server_eus:12.2::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Directory Server"
},
{
"branches": [
{
"category": "product_version",
"name": "redhat-ds:12:9020020240916150035:1674d574",
"product": {
"name": "redhat-ds:12:9020020240916150035:1674d574",
"product_id": "redhat-ds:12:9020020240916150035:1674d574",
"product_identification_helper": {
"purl": "pkg:rpmmod/redhat/redhat-ds@12:9020020240916150035:1674d574"
}
}
},
{
"category": "product_version",
"name": "cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch",
"product": {
"name": "cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch",
"product_id": "cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cockpit-389-ds@2.2.7-6.module%2Bel9dsrv%2B22320%2B37c894f3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch",
"product": {
"name": "python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch",
"product_id": "python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-lib389@2.2.7-6.module%2Bel9dsrv%2B22320%2B37c894f3?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src",
"product": {
"name": "389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src",
"product_id": "389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.2.7-6.module%2Bel9dsrv%2B22320%2B37c894f3?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"product": {
"name": "389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"product_id": "389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.2.7-6.module%2Bel9dsrv%2B22320%2B37c894f3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"product": {
"name": "389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"product_id": "389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@2.2.7-6.module%2Bel9dsrv%2B22320%2B37c894f3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"product": {
"name": "389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"product_id": "389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@2.2.7-6.module%2Bel9dsrv%2B22320%2B37c894f3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"product": {
"name": "389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"product_id": "389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@2.2.7-6.module%2Bel9dsrv%2B22320%2B37c894f3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"product": {
"name": "389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"product_id": "389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@2.2.7-6.module%2Bel9dsrv%2B22320%2B37c894f3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"product": {
"name": "389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"product_id": "389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@2.2.7-6.module%2Bel9dsrv%2B22320%2B37c894f3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"product": {
"name": "389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"product_id": "389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@2.2.7-6.module%2Bel9dsrv%2B22320%2B37c894f3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"product_id": "389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@2.2.7-6.module%2Bel9dsrv%2B22320%2B37c894f3?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "redhat-ds:12:9020020240916150035:1674d574 as a component of Red Hat Directory Server 12.2 EUS for RHEL 9",
"product_id": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574"
},
"product_reference": "redhat-ds:12:9020020240916150035:1674d574",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src as a component of redhat-ds:12:9020020240916150035:1674d574 as a component of Red Hat Directory Server 12.2 EUS for RHEL 9",
"product_id": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src"
},
"product_reference": "389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64 as a component of redhat-ds:12:9020020240916150035:1674d574 as a component of Red Hat Directory Server 12.2 EUS for RHEL 9",
"product_id": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64"
},
"product_reference": "389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64 as a component of redhat-ds:12:9020020240916150035:1674d574 as a component of Red Hat Directory Server 12.2 EUS for RHEL 9",
"product_id": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64 as a component of redhat-ds:12:9020020240916150035:1674d574 as a component of Red Hat Directory Server 12.2 EUS for RHEL 9",
"product_id": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64"
},
"product_reference": "389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64 as a component of redhat-ds:12:9020020240916150035:1674d574 as a component of Red Hat Directory Server 12.2 EUS for RHEL 9",
"product_id": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64"
},
"product_reference": "389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64 as a component of redhat-ds:12:9020020240916150035:1674d574 as a component of Red Hat Directory Server 12.2 EUS for RHEL 9",
"product_id": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64"
},
"product_reference": "389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64 as a component of redhat-ds:12:9020020240916150035:1674d574 as a component of Red Hat Directory Server 12.2 EUS for RHEL 9",
"product_id": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64 as a component of redhat-ds:12:9020020240916150035:1674d574 as a component of Red Hat Directory Server 12.2 EUS for RHEL 9",
"product_id": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64"
},
"product_reference": "389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64 as a component of redhat-ds:12:9020020240916150035:1674d574 as a component of Red Hat Directory Server 12.2 EUS for RHEL 9",
"product_id": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch as a component of redhat-ds:12:9020020240916150035:1674d574 as a component of Red Hat Directory Server 12.2 EUS for RHEL 9",
"product_id": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch"
},
"product_reference": "cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch as a component of redhat-ds:12:9020020240916150035:1674d574 as a component of Red Hat Directory Server 12.2 EUS for RHEL 9",
"product_id": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch"
},
"product_reference": "python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-1062",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2024-01-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2261879"
}
],
"notes": [
{
"category": "description",
"text": "A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-1062"
},
{
"category": "external",
"summary": "RHBZ#2261879",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261879"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-1062",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-1062"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-1062",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1062"
},
{
"category": "external",
"summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2256711",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256711"
}
],
"release_date": "2024-01-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-01T15:54:06+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:7458"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)"
},
{
"cve": "CVE-2024-3657",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-04-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2274401"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is categorized as an important severity issue rather than a critical one because, while it can cause a denial of service by stopping the directory service, it does not allow for remote code execution, privilege escalation, or data exfiltration. The impact is limited to service disruption, which can be mitigated by monitoring and automatic service restarts. Additionally, exploiting this vulnerability requires specific crafted packets, indicating that an attacker would need a certain level of knowledge and access to execute the attack, reducing the likelihood of widespread exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "RHBZ#2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-3657",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3657"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-01T15:54:06+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:7458"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request"
},
{
"acknowledgments": [
{
"names": [
"T\u00eako Mihinto"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2024-5953",
"cwe": {
"id": "CWE-1288",
"name": "Improper Validation of Consistency within Input"
},
"discovery_date": "2024-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2292104"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: Malformed userPassword hash may cause Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "LDAP servers are not usually exposed to the open internet, requiring adjacent connectivity for a successful attack. This issue also requires a compromised user account to perform the attack. Therefore, this flaw is rated as a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-5953"
},
{
"category": "external",
"summary": "RHBZ#2292104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292104"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-5953",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5953"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-5953",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5953"
}
],
"release_date": "2024-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-01T15:54:06+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:7458"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:redhat-ds:12:9020020240916150035:1674d574:python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: Malformed userPassword hash may cause Denial of Service"
}
]
}
RHSA-2024_5690
Vulnerability from csaf_redhat - Published: 2024-08-21 11:58 - Updated: 2024-12-04 14:24Summary
Red Hat Security Advisory: 389-ds:1.4 security update
Notes
Topic
An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.8 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.
Security Fix(es):
* 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) (CVE-2024-1062)
* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)
* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)
* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.8 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. \n\nSecurity Fix(es):\n\n* 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) (CVE-2024-1062)\n\n* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)\n\n* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)\n\n* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:5690",
"url": "https://access.redhat.com/errata/RHSA-2024:5690"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2261879",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261879"
},
{
"category": "external",
"summary": "2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "2292104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292104"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5690.json"
}
],
"title": "Red Hat Security Advisory: 389-ds:1.4 security update",
"tracking": {
"current_release_date": "2024-12-04T14:24:30+00:00",
"generator": {
"date": "2024-12-04T14:24:30+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2024:5690",
"initial_release_date": "2024-08-21T11:58:16+00:00",
"revision_history": [
{
"date": "2024-08-21T11:58:16+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-08-21T11:58:16+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-04T14:24:30+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:8.8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds:1.4:8080020240807050952:6dbb3803",
"product": {
"name": "389-ds:1.4:8080020240807050952:6dbb3803",
"product_id": "389-ds:1.4:8080020240807050952:6dbb3803",
"product_identification_helper": {
"purl": "pkg:rpmmod/redhat/389-ds@1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch",
"product": {
"name": "python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch",
"product_id": "python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-lib389@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src",
"product": {
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src",
"product_id": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product": {
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product_id": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product_id": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product_id": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product": {
"name": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product_id": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product": {
"name": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product_id": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product_id": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product": {
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product_id": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product_id": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product_id": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product": {
"name": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product_id": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product": {
"name": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product_id": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product_id": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product": {
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product_id": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product_id": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product_id": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product": {
"name": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product_id": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product": {
"name": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product_id": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product_id": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product": {
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product_id": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product_id": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product_id": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product": {
"name": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product_id": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product": {
"name": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product_id": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product_id": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
"product_reference": "389-ds:1.4:8080020240807050952:6dbb3803",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64"
},
"product_reference": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le"
},
"product_reference": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x"
},
"product_reference": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src"
},
"product_reference": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64"
},
"product_reference": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64"
},
"product_reference": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le"
},
"product_reference": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x"
},
"product_reference": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64"
},
"product_reference": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le"
},
"product_reference": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x"
},
"product_reference": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch as a component of 389-ds:1.4:8080020240807050952:6dbb3803 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch"
},
"product_reference": "python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-1062",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2024-01-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2261879"
}
],
"notes": [
{
"category": "description",
"text": "A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-1062"
},
{
"category": "external",
"summary": "RHBZ#2261879",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261879"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-1062",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-1062"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-1062",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1062"
},
{
"category": "external",
"summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2256711",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256711"
}
],
"release_date": "2024-01-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-08-21T11:58:16+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:5690"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)"
},
{
"cve": "CVE-2024-2199",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-03-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2267976"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "LDAP servers are not usually exposed to the open internet, requiring adjacent connectivity for a successful attack. This issue also requires a compromised user account to perform the attack. Therefore, this flaw is rated as a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-2199"
},
{
"category": "external",
"summary": "RHBZ#2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-2199",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2199"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-08-21T11:58:16+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:5690"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c"
},
{
"cve": "CVE-2024-3657",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-04-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2274401"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is categorized as an important severity issue rather than a critical one because, while it can cause a denial of service by stopping the directory service, it does not allow for remote code execution, privilege escalation, or data exfiltration. The impact is limited to service disruption, which can be mitigated by monitoring and automatic service restarts. Additionally, exploiting this vulnerability requires specific crafted packets, indicating that an attacker would need a certain level of knowledge and access to execute the attack, reducing the likelihood of widespread exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "RHBZ#2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-3657",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3657"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-08-21T11:58:16+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:5690"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request"
},
{
"acknowledgments": [
{
"names": [
"T\u00eako Mihinto"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2024-5953",
"cwe": {
"id": "CWE-1288",
"name": "Improper Validation of Consistency within Input"
},
"discovery_date": "2024-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2292104"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: Malformed userPassword hash may cause Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "LDAP servers are not usually exposed to the open internet, requiring adjacent connectivity for a successful attack. This issue also requires a compromised user account to perform the attack. Therefore, this flaw is rated as a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-5953"
},
{
"category": "external",
"summary": "RHBZ#2292104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292104"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-5953",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5953"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-5953",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5953"
}
],
"release_date": "2024-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-08-21T11:58:16+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:5690"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64",
"AppStream-8.8.0.Z.EUS:389-ds:1.4:8080020240807050952:6dbb3803:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: Malformed userPassword hash may cause Denial of Service"
}
]
}
RHSA-2024:4633
Vulnerability from csaf_redhat - Published: 2024-07-18 15:21 - Updated: 2025-11-21 19:06Summary
Red Hat Security Advisory: 389-ds-base security update
Notes
Topic
An update for 389-ds-base is now available for Red Hat Enterprise Linux 9.2 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.
Security Fix(es):
* 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) (CVE-2024-1062)
* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)
* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)
* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for 389-ds-base is now available for Red Hat Enterprise Linux 9.2 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.\n\nSecurity Fix(es):\n\n* 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) (CVE-2024-1062)\n\n* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)\n\n* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)\n\n* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:4633",
"url": "https://access.redhat.com/errata/RHSA-2024:4633"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2261879",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261879"
},
{
"category": "external",
"summary": "2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "2292104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292104"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4633.json"
}
],
"title": "Red Hat Security Advisory: 389-ds-base security update",
"tracking": {
"current_release_date": "2025-11-21T19:06:46+00:00",
"generator": {
"date": "2025-11-21T19:06:46+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2024:4633",
"initial_release_date": "2024-07-18T15:21:55+00:00",
"revision_history": [
{
"date": "2024-07-18T15:21:55+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-07-18T15:21:55+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T19:06:46+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.2::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.2.4-9.el9_2.src",
"product": {
"name": "389-ds-base-0:2.2.4-9.el9_2.src",
"product_id": "389-ds-base-0:2.2.4-9.el9_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.2.4-9.el9_2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.2.4-9.el9_2.aarch64",
"product": {
"name": "389-ds-base-0:2.2.4-9.el9_2.aarch64",
"product_id": "389-ds-base-0:2.2.4-9.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.2.4-9.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"product": {
"name": "389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"product_id": "389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@2.2.4-9.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"product": {
"name": "389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"product_id": "389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@2.2.4-9.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"product": {
"name": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"product_id": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@2.2.4-9.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"product": {
"name": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"product_id": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@2.2.4-9.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"product_id": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@2.2.4-9.el9_2?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"product": {
"name": "389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"product_id": "389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.2.4-9.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"product": {
"name": "389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"product_id": "389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@2.2.4-9.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"product": {
"name": "389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"product_id": "389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@2.2.4-9.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"product": {
"name": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"product_id": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@2.2.4-9.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"product": {
"name": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"product_id": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@2.2.4-9.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"product_id": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@2.2.4-9.el9_2?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.2.4-9.el9_2.x86_64",
"product": {
"name": "389-ds-base-0:2.2.4-9.el9_2.x86_64",
"product_id": "389-ds-base-0:2.2.4-9.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.2.4-9.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"product": {
"name": "389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"product_id": "389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@2.2.4-9.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"product": {
"name": "389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"product_id": "389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@2.2.4-9.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"product": {
"name": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"product_id": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@2.2.4-9.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"product": {
"name": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"product_id": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@2.2.4-9.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"product_id": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@2.2.4-9.el9_2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.2.4-9.el9_2.s390x",
"product": {
"name": "389-ds-base-0:2.2.4-9.el9_2.s390x",
"product_id": "389-ds-base-0:2.2.4-9.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.2.4-9.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"product": {
"name": "389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"product_id": "389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@2.2.4-9.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"product": {
"name": "389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"product_id": "389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@2.2.4-9.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"product": {
"name": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"product_id": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@2.2.4-9.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"product": {
"name": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"product_id": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@2.2.4-9.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"product_id": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@2.2.4-9.el9_2?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-lib389-0:2.2.4-9.el9_2.noarch",
"product": {
"name": "python3-lib389-0:2.2.4-9.el9_2.noarch",
"product_id": "python3-lib389-0:2.2.4-9.el9_2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-lib389@2.2.4-9.el9_2?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.2.4-9.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64"
},
"product_reference": "389-ds-base-0:2.2.4-9.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.2.4-9.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le"
},
"product_reference": "389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.2.4-9.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x"
},
"product_reference": "389-ds-base-0:2.2.4-9.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.2.4-9.el9_2.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src"
},
"product_reference": "389-ds-base-0:2.2.4-9.el9_2.src",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.2.4-9.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64"
},
"product_reference": "389-ds-base-0:2.2.4-9.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64"
},
"product_reference": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x"
},
"product_reference": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64"
},
"product_reference": "389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le"
},
"product_reference": "389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x"
},
"product_reference": "389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64"
},
"product_reference": "389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.2.4-9.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64"
},
"product_reference": "389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le"
},
"product_reference": "389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.2.4-9.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x"
},
"product_reference": "389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.2.4-9.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64"
},
"product_reference": "389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-lib389-0:2.2.4-9.el9_2.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
},
"product_reference": "python3-lib389-0:2.2.4-9.el9_2.noarch",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-1062",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2024-01-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2261879"
}
],
"notes": [
{
"category": "description",
"text": "A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-1062"
},
{
"category": "external",
"summary": "RHBZ#2261879",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261879"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-1062",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-1062"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-1062",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1062"
},
{
"category": "external",
"summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2256711",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256711"
}
],
"release_date": "2024-01-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-07-18T15:21:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the 389 server service will be restarted automatically.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4633"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)"
},
{
"cve": "CVE-2024-2199",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-03-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2267976"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "LDAP servers are not usually exposed to the open internet, requiring adjacent connectivity for a successful attack. This issue also requires a compromised user account to perform the attack. Therefore, this flaw is rated as a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-2199"
},
{
"category": "external",
"summary": "RHBZ#2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-2199",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2199"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-07-18T15:21:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the 389 server service will be restarted automatically.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4633"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c"
},
{
"cve": "CVE-2024-3657",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-04-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2274401"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is categorized as an important severity issue rather than a critical one because, while it can cause a denial of service by stopping the directory service, it does not allow for remote code execution, privilege escalation, or data exfiltration. The impact is limited to service disruption, which can be mitigated by monitoring and automatic service restarts. Additionally, exploiting this vulnerability requires specific crafted packets, indicating that an attacker would need a certain level of knowledge and access to execute the attack, reducing the likelihood of widespread exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "RHBZ#2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-3657",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3657"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-07-18T15:21:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the 389 server service will be restarted automatically.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4633"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request"
},
{
"acknowledgments": [
{
"names": [
"T\u00eako Mihinto"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2024-5953",
"cwe": {
"id": "CWE-1288",
"name": "Improper Validation of Consistency within Input"
},
"discovery_date": "2024-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2292104"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: Malformed userPassword hash may cause Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "LDAP servers are not usually exposed to the open internet, requiring adjacent connectivity for a successful attack. This issue also requires a compromised user account to perform the attack. Therefore, this flaw is rated as a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-5953"
},
{
"category": "external",
"summary": "RHBZ#2292104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292104"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-5953",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5953"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-5953",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5953"
}
],
"release_date": "2024-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-07-18T15:21:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the 389 server service will be restarted automatically.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4633"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.src",
"AppStream-9.2.0.Z.EUS:389-ds-base-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-debugsource-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-libs-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:389-ds-base-snmp-debuginfo-0:2.2.4-9.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:python3-lib389-0:2.2.4-9.el9_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: Malformed userPassword hash may cause Denial of Service"
}
]
}
RHSA-2024:7458
Vulnerability from csaf_redhat - Published: 2024-10-01 15:54 - Updated: 2025-11-21 19:13Summary
Red Hat Security Advisory: redhat-ds:12 security update
Notes
Topic
An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12 Extended Update Support for RHEL 9.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.
Details
Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration.
Security Fix(es):
* 389-ds-base: Denial of service when writing a value larger than 256 chars in
log_entry_attr (CVE-2024-1062) (BZ#2261879)
* 389-ds-base: Potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657) (BZ#2274401)
* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953) (BZ#2292104)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12 Extended Update Support for RHEL 9.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration.\n\nSecurity Fix(es):\n\n* 389-ds-base: Denial of service when writing a value larger than 256 chars in\nlog_entry_attr (CVE-2024-1062) (BZ#2261879)\n\n* 389-ds-base: Potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657) (BZ#2274401)\n\n* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953) (BZ#2292104)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:7458",
"url": "https://access.redhat.com/errata/RHSA-2024:7458"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2261879",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261879"
},
{
"category": "external",
"summary": "2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "2292104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292104"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7458.json"
}
],
"title": "Red Hat Security Advisory: redhat-ds:12 security update",
"tracking": {
"current_release_date": "2025-11-21T19:13:44+00:00",
"generator": {
"date": "2025-11-21T19:13:44+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2024:7458",
"initial_release_date": "2024-10-01T15:54:06+00:00",
"revision_history": [
{
"date": "2024-10-01T15:54:06+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-10-01T15:54:06+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T19:13:44+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Directory Server 12.2 EUS for RHEL 9",
"product": {
"name": "Red Hat Directory Server 12.2 EUS for RHEL 9",
"product_id": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:directory_server_eus:12.2::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Directory Server"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src::redhat-ds:12",
"product": {
"name": "389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src (redhat-ds:12)",
"product_id": "389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src::redhat-ds:12",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.2.7-6.module%2Bel9dsrv%2B22320%2B37c894f3?arch=src\u0026rpmmod=redhat-ds:12:9020020240916150035:1674d574"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"product": {
"name": "389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64 (redhat-ds:12)",
"product_id": "389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.2.7-6.module%2Bel9dsrv%2B22320%2B37c894f3?arch=x86_64\u0026rpmmod=redhat-ds:12:9020020240916150035:1674d574"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"product": {
"name": "389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64 (redhat-ds:12)",
"product_id": "389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@2.2.7-6.module%2Bel9dsrv%2B22320%2B37c894f3?arch=x86_64\u0026rpmmod=redhat-ds:12:9020020240916150035:1674d574"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"product": {
"name": "389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64 (redhat-ds:12)",
"product_id": "389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@2.2.7-6.module%2Bel9dsrv%2B22320%2B37c894f3?arch=x86_64\u0026rpmmod=redhat-ds:12:9020020240916150035:1674d574"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"product": {
"name": "389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64 (redhat-ds:12)",
"product_id": "389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@2.2.7-6.module%2Bel9dsrv%2B22320%2B37c894f3?arch=x86_64\u0026rpmmod=redhat-ds:12:9020020240916150035:1674d574"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"product": {
"name": "389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64 (redhat-ds:12)",
"product_id": "389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@2.2.7-6.module%2Bel9dsrv%2B22320%2B37c894f3?arch=x86_64\u0026rpmmod=redhat-ds:12:9020020240916150035:1674d574"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"product": {
"name": "389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64 (redhat-ds:12)",
"product_id": "389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@2.2.7-6.module%2Bel9dsrv%2B22320%2B37c894f3?arch=x86_64\u0026rpmmod=redhat-ds:12:9020020240916150035:1674d574"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"product": {
"name": "389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64 (redhat-ds:12)",
"product_id": "389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@2.2.7-6.module%2Bel9dsrv%2B22320%2B37c894f3?arch=x86_64\u0026rpmmod=redhat-ds:12:9020020240916150035:1674d574"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64 (redhat-ds:12)",
"product_id": "389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@2.2.7-6.module%2Bel9dsrv%2B22320%2B37c894f3?arch=x86_64\u0026rpmmod=redhat-ds:12:9020020240916150035:1674d574"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12",
"product": {
"name": "cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch (redhat-ds:12)",
"product_id": "cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cockpit-389-ds@2.2.7-6.module%2Bel9dsrv%2B22320%2B37c894f3?arch=noarch\u0026rpmmod=redhat-ds:12:9020020240916150035:1674d574"
}
}
},
{
"category": "product_version",
"name": "python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12",
"product": {
"name": "python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch (redhat-ds:12)",
"product_id": "python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-lib389@2.2.7-6.module%2Bel9dsrv%2B22320%2B37c894f3?arch=noarch\u0026rpmmod=redhat-ds:12:9020020240916150035:1674d574"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src (redhat-ds:12) as a component of Red Hat Directory Server 12.2 EUS for RHEL 9",
"product_id": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src::redhat-ds:12"
},
"product_reference": "389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src::redhat-ds:12",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64 (redhat-ds:12) as a component of Red Hat Directory Server 12.2 EUS for RHEL 9",
"product_id": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12"
},
"product_reference": "389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64 (redhat-ds:12) as a component of Red Hat Directory Server 12.2 EUS for RHEL 9",
"product_id": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12"
},
"product_reference": "389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64 (redhat-ds:12) as a component of Red Hat Directory Server 12.2 EUS for RHEL 9",
"product_id": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12"
},
"product_reference": "389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64 (redhat-ds:12) as a component of Red Hat Directory Server 12.2 EUS for RHEL 9",
"product_id": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12"
},
"product_reference": "389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64 (redhat-ds:12) as a component of Red Hat Directory Server 12.2 EUS for RHEL 9",
"product_id": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12"
},
"product_reference": "389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64 (redhat-ds:12) as a component of Red Hat Directory Server 12.2 EUS for RHEL 9",
"product_id": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64 (redhat-ds:12) as a component of Red Hat Directory Server 12.2 EUS for RHEL 9",
"product_id": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12"
},
"product_reference": "389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64 (redhat-ds:12) as a component of Red Hat Directory Server 12.2 EUS for RHEL 9",
"product_id": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch (redhat-ds:12) as a component of Red Hat Directory Server 12.2 EUS for RHEL 9",
"product_id": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12"
},
"product_reference": "cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch (redhat-ds:12) as a component of Red Hat Directory Server 12.2 EUS for RHEL 9",
"product_id": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12"
},
"product_reference": "python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-1062",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2024-01-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2261879"
}
],
"notes": [
{
"category": "description",
"text": "A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-1062"
},
{
"category": "external",
"summary": "RHBZ#2261879",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261879"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-1062",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-1062"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-1062",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1062"
},
{
"category": "external",
"summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2256711",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256711"
}
],
"release_date": "2024-01-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-01T15:54:06+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:7458"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)"
},
{
"cve": "CVE-2024-3657",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-04-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2274401"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is categorized as an important severity issue rather than a critical one because, while it can cause a denial of service by stopping the directory service, it does not allow for remote code execution, privilege escalation, or data exfiltration. The impact is limited to service disruption, which can be mitigated by monitoring and automatic service restarts. Additionally, exploiting this vulnerability requires specific crafted packets, indicating that an attacker would need a certain level of knowledge and access to execute the attack, reducing the likelihood of widespread exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "RHBZ#2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-3657",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3657"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-01T15:54:06+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:7458"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request"
},
{
"acknowledgments": [
{
"names": [
"T\u00eako Mihinto"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2024-5953",
"cwe": {
"id": "CWE-1288",
"name": "Improper Validation of Consistency within Input"
},
"discovery_date": "2024-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2292104"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: Malformed userPassword hash may cause Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "LDAP servers are not usually exposed to the open internet, requiring adjacent connectivity for a successful attack. This issue also requires a compromised user account to perform the attack. Therefore, this flaw is rated as a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-5953"
},
{
"category": "external",
"summary": "RHBZ#2292104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292104"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-5953",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5953"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-5953",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5953"
}
],
"release_date": "2024-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-01T15:54:06+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:7458"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.src::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-debugsource-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-devel-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-libs-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-libs-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-snmp-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:389-ds-base-snmp-debuginfo-0:2.2.7-6.module+el9dsrv+22320+37c894f3.x86_64::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:cockpit-389-ds-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12",
"BaseOS-9.2.0.Z.EUS-DirSrv-12.2-EUS:python3-lib389-0:2.2.7-6.module+el9dsrv+22320+37c894f3.noarch::redhat-ds:12"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: Malformed userPassword hash may cause Denial of Service"
}
]
}
RHSA-2024:5690
Vulnerability from csaf_redhat - Published: 2024-08-21 11:58 - Updated: 2025-11-21 19:10Summary
Red Hat Security Advisory: 389-ds:1.4 security update
Notes
Topic
An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.8 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.
Security Fix(es):
* 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) (CVE-2024-1062)
* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)
* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)
* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.8 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. \n\nSecurity Fix(es):\n\n* 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) (CVE-2024-1062)\n\n* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)\n\n* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)\n\n* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:5690",
"url": "https://access.redhat.com/errata/RHSA-2024:5690"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2261879",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261879"
},
{
"category": "external",
"summary": "2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "2292104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292104"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5690.json"
}
],
"title": "Red Hat Security Advisory: 389-ds:1.4 security update",
"tracking": {
"current_release_date": "2025-11-21T19:10:28+00:00",
"generator": {
"date": "2025-11-21T19:10:28+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2024:5690",
"initial_release_date": "2024-08-21T11:58:16+00:00",
"revision_history": [
{
"date": "2024-08-21T11:58:16+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-08-21T11:58:16+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T19:10:28+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:8.8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src::389-ds:1.4",
"product": {
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src (389-ds:1.4)",
"product_id": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=src\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch::389-ds:1.4",
"product": {
"name": "python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch (389-ds:1.4)",
"product_id": "python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-lib389@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=noarch\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=aarch64\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=aarch64\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=aarch64\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=aarch64\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=aarch64\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=aarch64\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=aarch64\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=aarch64\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=aarch64\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=aarch64\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=ppc64le\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=ppc64le\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=ppc64le\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=ppc64le\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=ppc64le\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=ppc64le\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=ppc64le\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=ppc64le\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=ppc64le\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=ppc64le\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x (389-ds:1.4)",
"product_id": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=s390x\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x (389-ds:1.4)",
"product_id": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=s390x\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x (389-ds:1.4)",
"product_id": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=s390x\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x (389-ds:1.4)",
"product_id": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=s390x\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x (389-ds:1.4)",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=s390x\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x (389-ds:1.4)",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=s390x\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x (389-ds:1.4)",
"product_id": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=s390x\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x (389-ds:1.4)",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=s390x\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x (389-ds:1.4)",
"product_id": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=s390x\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x (389-ds:1.4)",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=s390x\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=x86_64\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=x86_64\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=x86_64\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=x86_64\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=x86_64\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=x86_64\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=x86_64\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=x86_64\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=x86_64\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.35-5.module%2Bel8.8.0%2B22193%2B5f98570a?arch=x86_64\u0026rpmmod=389-ds:1.4:8080020240807050952:6dbb3803"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src::389-ds:1.4"
},
"product_reference": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.EUS:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch::389-ds:1.4"
},
"product_reference": "python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.8.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-1062",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2024-01-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2261879"
}
],
"notes": [
{
"category": "description",
"text": "A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch::389-ds:1.4"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-1062"
},
{
"category": "external",
"summary": "RHBZ#2261879",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261879"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-1062",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-1062"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-1062",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1062"
},
{
"category": "external",
"summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2256711",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256711"
}
],
"release_date": "2024-01-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-08-21T11:58:16+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch::389-ds:1.4"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:5690"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch::389-ds:1.4"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch::389-ds:1.4"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)"
},
{
"cve": "CVE-2024-2199",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-03-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2267976"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "LDAP servers are not usually exposed to the open internet, requiring adjacent connectivity for a successful attack. This issue also requires a compromised user account to perform the attack. Therefore, this flaw is rated as a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch::389-ds:1.4"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-2199"
},
{
"category": "external",
"summary": "RHBZ#2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-2199",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2199"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-08-21T11:58:16+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch::389-ds:1.4"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:5690"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch::389-ds:1.4"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch::389-ds:1.4"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c"
},
{
"cve": "CVE-2024-3657",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-04-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2274401"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is categorized as an important severity issue rather than a critical one because, while it can cause a denial of service by stopping the directory service, it does not allow for remote code execution, privilege escalation, or data exfiltration. The impact is limited to service disruption, which can be mitigated by monitoring and automatic service restarts. Additionally, exploiting this vulnerability requires specific crafted packets, indicating that an attacker would need a certain level of knowledge and access to execute the attack, reducing the likelihood of widespread exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch::389-ds:1.4"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "RHBZ#2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-3657",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3657"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-08-21T11:58:16+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch::389-ds:1.4"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:5690"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch::389-ds:1.4"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch::389-ds:1.4"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request"
},
{
"acknowledgments": [
{
"names": [
"T\u00eako Mihinto"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2024-5953",
"cwe": {
"id": "CWE-1288",
"name": "Improper Validation of Consistency within Input"
},
"discovery_date": "2024-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2292104"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: Malformed userPassword hash may cause Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "LDAP servers are not usually exposed to the open internet, requiring adjacent connectivity for a successful attack. This issue also requires a compromised user account to perform the attack. Therefore, this flaw is rated as a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch::389-ds:1.4"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-5953"
},
{
"category": "external",
"summary": "RHBZ#2292104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292104"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-5953",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5953"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-5953",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5953"
}
],
"release_date": "2024-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-08-21T11:58:16+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch::389-ds:1.4"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:5690"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch::389-ds:1.4"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.src::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-debugsource-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-devel-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-libs-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.aarch64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.ppc64le::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.s390x::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.x86_64::389-ds:1.4",
"AppStream-8.8.0.Z.EUS:python3-lib389-0:1.4.3.35-5.module+el8.8.0+22193+5f98570a.noarch::389-ds:1.4"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: Malformed userPassword hash may cause Denial of Service"
}
]
}
RHSA-2024:6576
Vulnerability from csaf_redhat - Published: 2024-09-11 06:38 - Updated: 2025-11-21 19:11Summary
Red Hat Security Advisory: redhat-ds:11 security and bug fix update
Notes
Topic
An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.7 for RHEL 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration.
Security Fixes:
* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)
* 389-ds-base: Specially crafted kerberos AS-REQ request may cause Denial of Service (CVE-2024-3657)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Improved performance of filter component when evaluating a large value
set, such as group members (DIRSRV-153)
* The new connection timeout error no longer breaks error mapping (DIRSRV-154)
Users of Red Hat Directory Server 11 are advised to install these updated packages.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.7 for RHEL 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration.\n\nSecurity Fixes:\n\n* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)\n\n* 389-ds-base: Specially crafted kerberos AS-REQ request may cause Denial of Service (CVE-2024-3657)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Improved performance of filter component when evaluating a large value\nset, such as group members (DIRSRV-153)\n\n* The new connection timeout error no longer breaks error mapping (DIRSRV-154)\n\nUsers of Red Hat Directory Server 11 are advised to install these updated packages.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:6576",
"url": "https://access.redhat.com/errata/RHSA-2024:6576"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "2292104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292104"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6576.json"
}
],
"title": "Red Hat Security Advisory: redhat-ds:11 security and bug fix update",
"tracking": {
"current_release_date": "2025-11-21T19:11:52+00:00",
"generator": {
"date": "2025-11-21T19:11:52+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2024:6576",
"initial_release_date": "2024-09-11T06:38:09+00:00",
"revision_history": [
{
"date": "2024-09-11T06:38:09+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-09-11T06:38:09+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T19:11:52+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Directory Server 11.7 for RHEL 8",
"product": {
"name": "Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:directory_server:11.7::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Directory Server"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src::redhat-ds:11",
"product": {
"name": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src (redhat-ds:11)",
"product_id": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.34-4.module%2Bel8dsrv%2B22274%2Ba8abd89c?arch=src\u0026rpmmod=redhat-ds:11:8080020240909040333:f969626e"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.34-4.module%2Bel8dsrv%2B22274%2Ba8abd89c?arch=x86_64\u0026rpmmod=redhat-ds:11:8080020240909040333:f969626e"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.34-4.module%2Bel8dsrv%2B22274%2Ba8abd89c?arch=x86_64\u0026rpmmod=redhat-ds:11:8080020240909040333:f969626e"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.34-4.module%2Bel8dsrv%2B22274%2Ba8abd89c?arch=x86_64\u0026rpmmod=redhat-ds:11:8080020240909040333:f969626e"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.34-4.module%2Bel8dsrv%2B22274%2Ba8abd89c?arch=x86_64\u0026rpmmod=redhat-ds:11:8080020240909040333:f969626e"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.34-4.module%2Bel8dsrv%2B22274%2Ba8abd89c?arch=x86_64\u0026rpmmod=redhat-ds:11:8080020240909040333:f969626e"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.34-4.module%2Bel8dsrv%2B22274%2Ba8abd89c?arch=x86_64\u0026rpmmod=redhat-ds:11:8080020240909040333:f969626e"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.34-4.module%2Bel8dsrv%2B22274%2Ba8abd89c?arch=x86_64\u0026rpmmod=redhat-ds:11:8080020240909040333:f969626e"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.34-4.module%2Bel8dsrv%2B22274%2Ba8abd89c?arch=x86_64\u0026rpmmod=redhat-ds:11:8080020240909040333:f969626e"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.34-4.module%2Bel8dsrv%2B22274%2Ba8abd89c?arch=x86_64\u0026rpmmod=redhat-ds:11:8080020240909040333:f969626e"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.34-4.module%2Bel8dsrv%2B22274%2Ba8abd89c?arch=x86_64\u0026rpmmod=redhat-ds:11:8080020240909040333:f969626e"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch::redhat-ds:11",
"product": {
"name": "cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch (redhat-ds:11)",
"product_id": "cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cockpit-389-ds@1.4.3.34-4.module%2Bel8dsrv%2B22274%2Ba8abd89c?arch=noarch\u0026rpmmod=redhat-ds:11:8080020240909040333:f969626e"
}
}
},
{
"category": "product_version",
"name": "python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch::redhat-ds:11",
"product": {
"name": "python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch (redhat-ds:11)",
"product_id": "python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-lib389@1.4.3.34-4.module%2Bel8dsrv%2B22274%2Ba8abd89c?arch=noarch\u0026rpmmod=redhat-ds:11:8080020240909040333:f969626e"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src (redhat-ds:11) as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src::redhat-ds:11"
},
"product_reference": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch (redhat-ds:11) as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch::redhat-ds:11"
},
"product_reference": "cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch (redhat-ds:11) as a component of Red Hat Directory Server 11.7 for RHEL 8",
"product_id": "8Base-DirSrv-11.7:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch::redhat-ds:11"
},
"product_reference": "python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-3657",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-04-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2274401"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is categorized as an important severity issue rather than a critical one because, while it can cause a denial of service by stopping the directory service, it does not allow for remote code execution, privilege escalation, or data exfiltration. The impact is limited to service disruption, which can be mitigated by monitoring and automatic service restarts. Additionally, exploiting this vulnerability requires specific crafted packets, indicating that an attacker would need a certain level of knowledge and access to execute the attack, reducing the likelihood of widespread exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-DirSrv-11.7:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch::redhat-ds:11",
"8Base-DirSrv-11.7:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch::redhat-ds:11"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "RHBZ#2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-3657",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3657"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-09-11T06:38:09+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-DirSrv-11.7:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch::redhat-ds:11",
"8Base-DirSrv-11.7:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch::redhat-ds:11"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:6576"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-DirSrv-11.7:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch::redhat-ds:11",
"8Base-DirSrv-11.7:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch::redhat-ds:11"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-DirSrv-11.7:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch::redhat-ds:11",
"8Base-DirSrv-11.7:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch::redhat-ds:11"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request"
},
{
"acknowledgments": [
{
"names": [
"T\u00eako Mihinto"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2024-5953",
"cwe": {
"id": "CWE-1288",
"name": "Improper Validation of Consistency within Input"
},
"discovery_date": "2024-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2292104"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: Malformed userPassword hash may cause Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "LDAP servers are not usually exposed to the open internet, requiring adjacent connectivity for a successful attack. This issue also requires a compromised user account to perform the attack. Therefore, this flaw is rated as a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-DirSrv-11.7:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch::redhat-ds:11",
"8Base-DirSrv-11.7:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch::redhat-ds:11"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-5953"
},
{
"category": "external",
"summary": "RHBZ#2292104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292104"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-5953",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5953"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-5953",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5953"
}
],
"release_date": "2024-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-09-11T06:38:09+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-DirSrv-11.7:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch::redhat-ds:11",
"8Base-DirSrv-11.7:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch::redhat-ds:11"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:6576"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-DirSrv-11.7:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch::redhat-ds:11",
"8Base-DirSrv-11.7:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch::redhat-ds:11"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-DirSrv-11.7:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.src::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-debugsource-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-devel-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-legacy-tools-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-libs-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-libs-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-snmp-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:389-ds-base-snmp-debuginfo-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.x86_64::redhat-ds:11",
"8Base-DirSrv-11.7:cockpit-389-ds-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch::redhat-ds:11",
"8Base-DirSrv-11.7:python3-lib389-0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c.noarch::redhat-ds:11"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: Malformed userPassword hash may cause Denial of Service"
}
]
}
RHSA-2024_4235
Vulnerability from csaf_redhat - Published: 2024-07-02 15:38 - Updated: 2024-11-28 17:21Summary
Red Hat Security Advisory: 389-ds security update
Notes
Topic
An update for 389-ds is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.
Security Fix(es):
* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)
* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for 389-ds is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. \n\nSecurity Fix(es):\n\n* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)\n\n* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:4235",
"url": "https://access.redhat.com/errata/RHSA-2024:4235"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "RHEL-16277",
"url": "https://issues.redhat.com/browse/RHEL-16277"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4235.json"
}
],
"title": "Red Hat Security Advisory: 389-ds security update",
"tracking": {
"current_release_date": "2024-11-28T17:21:06+00:00",
"generator": {
"date": "2024-11-28T17:21:06+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2024:4235",
"initial_release_date": "2024-07-02T15:38:55+00:00",
"revision_history": [
{
"date": "2024-07-02T15:38:55+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-07-02T15:38:55+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-28T17:21:06+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds:1.4:8100020240613122040:25e700aa",
"product": {
"name": "389-ds:1.4:8100020240613122040:25e700aa",
"product_id": "389-ds:1.4:8100020240613122040:25e700aa",
"product_identification_helper": {
"purl": "pkg:rpmmod/redhat/389-ds@1.4:8100020240613122040:25e700aa"
}
}
},
{
"category": "product_version",
"name": "python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch",
"product": {
"name": "python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch",
"product_id": "python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-lib389@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src",
"product": {
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src",
"product_id": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product": {
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product_id": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product_id": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product_id": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product": {
"name": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product_id": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product": {
"name": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product_id": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product_id": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product": {
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product_id": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product_id": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product_id": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product": {
"name": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product_id": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product": {
"name": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product_id": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product_id": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product": {
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product_id": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product_id": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product_id": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product": {
"name": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product_id": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product": {
"name": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product_id": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product_id": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product": {
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product_id": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product_id": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product_id": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product": {
"name": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product_id": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product": {
"name": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product_id": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product_id": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.39-7.module%2Bel8.10.0%2B21985%2B3665ccdb?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
"product_reference": "389-ds:1.4:8100020240613122040:25e700aa",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64"
},
"product_reference": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le"
},
"product_reference": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x"
},
"product_reference": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src"
},
"product_reference": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64"
},
"product_reference": "389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64"
},
"product_reference": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le"
},
"product_reference": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x"
},
"product_reference": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64"
},
"product_reference": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le"
},
"product_reference": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x"
},
"product_reference": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64 as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64 as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch as a component of 389-ds:1.4:8100020240613122040:25e700aa as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch"
},
"product_reference": "python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-2199",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-03-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2267976"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "LDAP servers are not usually exposed to the open internet, requiring adjacent connectivity for a successful attack. This issue also requires a compromised user account to perform the attack. Therefore, this flaw is rated as a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-2199"
},
{
"category": "external",
"summary": "RHBZ#2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-2199",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2199"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-07-02T15:38:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4235"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c"
},
{
"cve": "CVE-2024-3657",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-04-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2274401"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is categorized as an important severity issue rather than a critical one because, while it can cause a denial of service by stopping the directory service, it does not allow for remote code execution, privilege escalation, or data exfiltration. The impact is limited to service disruption, which can be mitigated by monitoring and automatic service restarts. Additionally, exploiting this vulnerability requires specific crafted packets, indicating that an attacker would need a certain level of knowledge and access to execute the attack, reducing the likelihood of widespread exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "RHBZ#2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-3657",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3657"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-07-02T15:38:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4235"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.src",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-debugsource-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-devel-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-libs-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:389-ds-base-snmp-debuginfo-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds:1.4:8100020240613122040:25e700aa:python3-lib389-0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request"
}
]
}
RHSA-2024_3837
Vulnerability from csaf_redhat - Published: 2024-06-11 19:53 - Updated: 2024-11-28 17:20Summary
Red Hat Security Advisory: 389-ds-base security update
Notes
Topic
An update for 389-ds-base is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of
Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base
packages include the Lightweight Directory Access Protocol (LDAP) server and
command-line utilities for server administration.
Security Fix(es):
* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)
* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for 389-ds-base is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of\nImportant. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base\npackages include the Lightweight Directory Access Protocol (LDAP) server and\ncommand-line utilities for server administration.\n\nSecurity Fix(es):\n\n* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)\n\n* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:3837",
"url": "https://access.redhat.com/errata/RHSA-2024:3837"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3837.json"
}
],
"title": "Red Hat Security Advisory: 389-ds-base security update",
"tracking": {
"current_release_date": "2024-11-28T17:20:20+00:00",
"generator": {
"date": "2024-11-28T17:20:20+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2024:3837",
"initial_release_date": "2024-06-11T19:53:52+00:00",
"revision_history": [
{
"date": "2024-06-11T19:53:52+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-06-11T19:53:52+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-28T17:20:20+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux CRB (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::crb"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.4.5-8.el9_4.src",
"product": {
"name": "389-ds-base-0:2.4.5-8.el9_4.src",
"product_id": "389-ds-base-0:2.4.5-8.el9_4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.4.5-8.el9_4?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.4.5-8.el9_4.aarch64",
"product": {
"name": "389-ds-base-0:2.4.5-8.el9_4.aarch64",
"product_id": "389-ds-base-0:2.4.5-8.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.4.5-8.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"product": {
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"product_id": "389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@2.4.5-8.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"product": {
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"product_id": "389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@2.4.5-8.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"product": {
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"product_id": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@2.4.5-8.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"product": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"product_id": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@2.4.5-8.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"product_id": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@2.4.5-8.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"product": {
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"product_id": "389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@2.4.5-8.el9_4?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"product": {
"name": "389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"product_id": "389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.4.5-8.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"product": {
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"product_id": "389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@2.4.5-8.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"product": {
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"product_id": "389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@2.4.5-8.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"product": {
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"product_id": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@2.4.5-8.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"product": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"product_id": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@2.4.5-8.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"product_id": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@2.4.5-8.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"product": {
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"product_id": "389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@2.4.5-8.el9_4?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.4.5-8.el9_4.x86_64",
"product": {
"name": "389-ds-base-0:2.4.5-8.el9_4.x86_64",
"product_id": "389-ds-base-0:2.4.5-8.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.4.5-8.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"product": {
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"product_id": "389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@2.4.5-8.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"product": {
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"product_id": "389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@2.4.5-8.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"product": {
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"product_id": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@2.4.5-8.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"product": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"product_id": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@2.4.5-8.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"product_id": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@2.4.5-8.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"product": {
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"product_id": "389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@2.4.5-8.el9_4?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:2.4.5-8.el9_4.s390x",
"product": {
"name": "389-ds-base-0:2.4.5-8.el9_4.s390x",
"product_id": "389-ds-base-0:2.4.5-8.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@2.4.5-8.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"product": {
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"product_id": "389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@2.4.5-8.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"product": {
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"product_id": "389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@2.4.5-8.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"product": {
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"product_id": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@2.4.5-8.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"product": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"product_id": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@2.4.5-8.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"product_id": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@2.4.5-8.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"product": {
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"product_id": "389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@2.4.5-8.el9_4?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-lib389-0:2.4.5-8.el9_4.noarch",
"product": {
"name": "python3-lib389-0:2.4.5-8.el9_4.noarch",
"product_id": "python3-lib389-0:2.4.5-8.el9_4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-lib389@2.4.5-8.el9_4?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.4.5-8.el9_4.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src"
},
"product_reference": "389-ds-base-0:2.4.5-8.el9_4.src",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-lib389-0:2.4.5-8.el9_4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch"
},
"product_reference": "python3-lib389-0:2.4.5-8.el9_4.noarch",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.4.5-8.el9_4.src as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src"
},
"product_reference": "389-ds-base-0:2.4.5-8.el9_4.src",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-lib389-0:2.4.5-8.el9_4.noarch as a component of Red Hat Enterprise Linux CRB (v. 9)",
"product_id": "CRB-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch"
},
"product_reference": "python3-lib389-0:2.4.5-8.el9_4.noarch",
"relates_to_product_reference": "CRB-9.4.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-2199",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-03-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2267976"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "LDAP servers are not usually exposed to the open internet, requiring adjacent connectivity for a successful attack. This issue also requires a compromised user account to perform the attack. Therefore, this flaw is rated as a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-2199"
},
{
"category": "external",
"summary": "RHBZ#2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-2199",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2199"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-06-11T19:53:52+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:3837"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c"
},
{
"cve": "CVE-2024-3657",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-04-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2274401"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is categorized as an important severity issue rather than a critical one because, while it can cause a denial of service by stopping the directory service, it does not allow for remote code execution, privilege escalation, or data exfiltration. The impact is limited to service disruption, which can be mitigated by monitoring and automatic service restarts. Additionally, exploiting this vulnerability requires specific crafted packets, indicating that an attacker would need a certain level of knowledge and access to execute the attack, reducing the likelihood of widespread exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "RHBZ#2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-3657",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3657"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-06-11T19:53:52+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:3837"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.src",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-debugsource-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-devel-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.aarch64",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.ppc64le",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.s390x",
"CRB-9.4.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:2.4.5-8.el9_4.x86_64",
"CRB-9.4.0.Z.MAIN.EUS:python3-lib389-0:2.4.5-8.el9_4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request"
}
]
}
RHSA-2024_3591
Vulnerability from csaf_redhat - Published: 2024-06-04 14:31 - Updated: 2024-11-28 17:20Summary
Red Hat Security Advisory: 389-ds-base security update
Notes
Topic
An update for 389-ds-base is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.
Security Fix(es):
* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)
* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for 389-ds-base is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.\n\nSecurity Fix(es):\n\n* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)\n\n* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:3591",
"url": "https://access.redhat.com/errata/RHSA-2024:3591"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3591.json"
}
],
"title": "Red Hat Security Advisory: 389-ds-base security update",
"tracking": {
"current_release_date": "2024-11-28T17:20:08+00:00",
"generator": {
"date": "2024-11-28T17:20:08+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2024:3591",
"initial_release_date": "2024-06-04T14:31:19+00:00",
"revision_history": [
{
"date": "2024-06-04T14:31:19+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-06-04T14:31:19+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-28T17:20:08+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.3.11.1-5.el7_9.src",
"product": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.src",
"product_id": "389-ds-base-0:1.3.11.1-5.el7_9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.3.11.1-5.el7_9?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"product": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"product_id": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.3.11.1-5.el7_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"product": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"product_id": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.3.11.1-5.el7_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"product": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"product_id": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.3.11.1-5.el7_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"product": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"product_id": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.3.11.1-5.el7_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"product": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"product_id": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.3.11.1-5.el7_9?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"product": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"product_id": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.3.11.1-5.el7_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"product": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"product_id": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.3.11.1-5.el7_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"product": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"product_id": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.3.11.1-5.el7_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"product": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"product_id": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.3.11.1-5.el7_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"product": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"product_id": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.3.11.1-5.el7_9?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"product": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"product_id": "389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.3.11.1-5.el7_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"product": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"product_id": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.3.11.1-5.el7_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"product": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"product_id": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.3.11.1-5.el7_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"product": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"product_id": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.3.11.1-5.el7_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"product": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"product_id": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.3.11.1-5.el7_9?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"product": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"product_id": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.3.11.1-5.el7_9?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"product": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"product_id": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.3.11.1-5.el7_9?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"product": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"product_id": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.3.11.1-5.el7_9?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"product": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"product_id": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.3.11.1-5.el7_9?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"product": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"product_id": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.3.11.1-5.el7_9?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.src",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.src",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.src",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.src",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.src",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.src",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-2199",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-03-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2267976"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "LDAP servers are not usually exposed to the open internet, requiring adjacent connectivity for a successful attack. This issue also requires a compromised user account to perform the attack. Therefore, this flaw is rated as a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-2199"
},
{
"category": "external",
"summary": "RHBZ#2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-2199",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2199"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-06-04T14:31:19+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the 389 server service will be restarted automatically.",
"product_ids": [
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:3591"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c"
},
{
"cve": "CVE-2024-3657",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-04-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2274401"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is categorized as an important severity issue rather than a critical one because, while it can cause a denial of service by stopping the directory service, it does not allow for remote code execution, privilege escalation, or data exfiltration. The impact is limited to service disruption, which can be mitigated by monitoring and automatic service restarts. Additionally, exploiting this vulnerability requires specific crafted packets, indicating that an attacker would need a certain level of knowledge and access to execute the attack, reducing the likelihood of widespread exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "RHBZ#2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-3657",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3657"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-06-04T14:31:19+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the 389 server service will be restarted automatically.",
"product_ids": [
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:3591"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request"
}
]
}
RHSA-2024:3591
Vulnerability from csaf_redhat - Published: 2024-06-04 14:31 - Updated: 2025-11-21 19:03Summary
Red Hat Security Advisory: 389-ds-base security update
Notes
Topic
An update for 389-ds-base is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.
Security Fix(es):
* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)
* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for 389-ds-base is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.\n\nSecurity Fix(es):\n\n* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)\n\n* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:3591",
"url": "https://access.redhat.com/errata/RHSA-2024:3591"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3591.json"
}
],
"title": "Red Hat Security Advisory: 389-ds-base security update",
"tracking": {
"current_release_date": "2025-11-21T19:03:32+00:00",
"generator": {
"date": "2025-11-21T19:03:32+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2024:3591",
"initial_release_date": "2024-06-04T14:31:19+00:00",
"revision_history": [
{
"date": "2024-06-04T14:31:19+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-06-04T14:31:19+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T19:03:32+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.3.11.1-5.el7_9.src",
"product": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.src",
"product_id": "389-ds-base-0:1.3.11.1-5.el7_9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.3.11.1-5.el7_9?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"product": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"product_id": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.3.11.1-5.el7_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"product": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"product_id": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.3.11.1-5.el7_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"product": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"product_id": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.3.11.1-5.el7_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"product": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"product_id": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.3.11.1-5.el7_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"product": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"product_id": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.3.11.1-5.el7_9?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"product": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"product_id": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.3.11.1-5.el7_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"product": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"product_id": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.3.11.1-5.el7_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"product": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"product_id": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.3.11.1-5.el7_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"product": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"product_id": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.3.11.1-5.el7_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"product": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"product_id": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.3.11.1-5.el7_9?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"product": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"product_id": "389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.3.11.1-5.el7_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"product": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"product_id": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.3.11.1-5.el7_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"product": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"product_id": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.3.11.1-5.el7_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"product": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"product_id": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.3.11.1-5.el7_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"product": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"product_id": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.3.11.1-5.el7_9?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"product": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"product_id": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.3.11.1-5.el7_9?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"product": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"product_id": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.3.11.1-5.el7_9?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"product": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"product_id": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.3.11.1-5.el7_9?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"product": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"product_id": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.3.11.1-5.el7_9?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"product": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"product_id": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.3.11.1-5.el7_9?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.src",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Client-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.src",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.src",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.src",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Server-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.src",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.src",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
},
"product_reference": "389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.9.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-2199",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-03-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2267976"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "LDAP servers are not usually exposed to the open internet, requiring adjacent connectivity for a successful attack. This issue also requires a compromised user account to perform the attack. Therefore, this flaw is rated as a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-2199"
},
{
"category": "external",
"summary": "RHBZ#2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-2199",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2199"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-06-04T14:31:19+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the 389 server service will be restarted automatically.",
"product_ids": [
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:3591"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c"
},
{
"cve": "CVE-2024-3657",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-04-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2274401"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is categorized as an important severity issue rather than a critical one because, while it can cause a denial of service by stopping the directory service, it does not allow for remote code execution, privilege escalation, or data exfiltration. The impact is limited to service disruption, which can be mitigated by monitoring and automatic service restarts. Additionally, exploiting this vulnerability requires specific crafted packets, indicating that an attacker would need a certain level of knowledge and access to execute the attack, reducing the likelihood of widespread exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "RHBZ#2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-3657",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3657"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-06-04T14:31:19+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the 389 server service will be restarted automatically.",
"product_ids": [
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:3591"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Client-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Client-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7ComputeNode-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7ComputeNode-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Server-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Server-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.src",
"7Workstation-optional-7.9.Z:389-ds-base-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-debuginfo-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-devel-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-libs-0:1.3.11.1-5.el7_9.x86_64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.ppc64le",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.s390x",
"7Workstation-optional-7.9.Z:389-ds-base-snmp-0:1.3.11.1-5.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request"
}
]
}
RHSA-2024:4209
Vulnerability from csaf_redhat - Published: 2024-07-02 08:02 - Updated: 2025-11-21 19:04Summary
Red Hat Security Advisory: redhat-ds:11 security and bug fix update
Notes
Topic
An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.2 for RHEL 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration.
Security Fix(s):
* 389-ds-base: Potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657) (BZ#2274401)
* 389-ds-base: Authenticated user can cause a server failure while modifying `userPassword` using malformed input (CVE-2024-2199) (BZ#2267976)
* 389-ds-base: Denial of service when writing a value larger than 256 chars in log_entry_attr (CVE-2024-1062) (BZ#2261879)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug fix(es):
* Directory Server now flushes the entry cache less frequently (BZ#2268177)
* The `ns-slapd` binary is now linked with the thread-safe `libldap_r` library, no longer causing segmentation fault (BZ#2264534)
Users of Red Hat Directory Server 11 are advised to install these updated packages.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.2 for RHEL 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration.\n\nSecurity Fix(s):\n* 389-ds-base: Potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657) (BZ#2274401)\n\n* 389-ds-base: Authenticated user can cause a server failure while modifying `userPassword` using malformed input (CVE-2024-2199) (BZ#2267976)\n\n* 389-ds-base: Denial of service when writing a value larger than 256 chars in log_entry_attr (CVE-2024-1062) (BZ#2261879)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug fix(es):\n\n* Directory Server now flushes the entry cache less frequently (BZ#2268177)\n\n* The `ns-slapd` binary is now linked with the thread-safe `libldap_r` library, no longer causing segmentation fault (BZ#2264534)\n\nUsers of Red Hat Directory Server 11 are advised to install these updated packages.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:4209",
"url": "https://access.redhat.com/errata/RHSA-2024:4209"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2261879",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261879"
},
{
"category": "external",
"summary": "2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "2268183",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268183"
},
{
"category": "external",
"summary": "2274367",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274367"
},
{
"category": "external",
"summary": "2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4209.json"
}
],
"title": "Red Hat Security Advisory: redhat-ds:11 security and bug fix update",
"tracking": {
"current_release_date": "2025-11-21T19:04:51+00:00",
"generator": {
"date": "2025-11-21T19:04:51+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2024:4209",
"initial_release_date": "2024-07-02T08:02:32+00:00",
"revision_history": [
{
"date": "2024-07-02T08:02:32+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-07-02T08:02:33+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T19:04:51+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Directory Server 11.8 for RHEL 8",
"product": {
"name": "Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:directory_server:11.8::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Directory Server"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src::redhat-ds:11",
"product": {
"name": "389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src (redhat-ds:11)",
"product_id": "389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.37-10.module%2Bel8dsrv%2B21971%2Bf7435891?arch=src\u0026rpmmod=redhat-ds:11:8090020240606122459:91529cd0"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.37-10.module%2Bel8dsrv%2B21971%2Bf7435891?arch=x86_64\u0026rpmmod=redhat-ds:11:8090020240606122459:91529cd0"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.37-10.module%2Bel8dsrv%2B21971%2Bf7435891?arch=x86_64\u0026rpmmod=redhat-ds:11:8090020240606122459:91529cd0"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.37-10.module%2Bel8dsrv%2B21971%2Bf7435891?arch=x86_64\u0026rpmmod=redhat-ds:11:8090020240606122459:91529cd0"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.37-10.module%2Bel8dsrv%2B21971%2Bf7435891?arch=x86_64\u0026rpmmod=redhat-ds:11:8090020240606122459:91529cd0"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.37-10.module%2Bel8dsrv%2B21971%2Bf7435891?arch=x86_64\u0026rpmmod=redhat-ds:11:8090020240606122459:91529cd0"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.37-10.module%2Bel8dsrv%2B21971%2Bf7435891?arch=x86_64\u0026rpmmod=redhat-ds:11:8090020240606122459:91529cd0"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.37-10.module%2Bel8dsrv%2B21971%2Bf7435891?arch=x86_64\u0026rpmmod=redhat-ds:11:8090020240606122459:91529cd0"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.37-10.module%2Bel8dsrv%2B21971%2Bf7435891?arch=x86_64\u0026rpmmod=redhat-ds:11:8090020240606122459:91529cd0"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.37-10.module%2Bel8dsrv%2B21971%2Bf7435891?arch=x86_64\u0026rpmmod=redhat-ds:11:8090020240606122459:91529cd0"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.37-10.module%2Bel8dsrv%2B21971%2Bf7435891?arch=x86_64\u0026rpmmod=redhat-ds:11:8090020240606122459:91529cd0"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11",
"product": {
"name": "cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch (redhat-ds:11)",
"product_id": "cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cockpit-389-ds@1.4.3.37-10.module%2Bel8dsrv%2B21971%2Bf7435891?arch=noarch\u0026rpmmod=redhat-ds:11:8090020240606122459:91529cd0"
}
}
},
{
"category": "product_version",
"name": "python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11",
"product": {
"name": "python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch (redhat-ds:11)",
"product_id": "python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-lib389@1.4.3.37-10.module%2Bel8dsrv%2B21971%2Bf7435891?arch=noarch\u0026rpmmod=redhat-ds:11:8090020240606122459:91529cd0"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src (redhat-ds:11) as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src::redhat-ds:11"
},
"product_reference": "389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch (redhat-ds:11) as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11"
},
"product_reference": "cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch (redhat-ds:11) as a component of Red Hat Directory Server 11.8 for RHEL 8",
"product_id": "8Base-DirSrv-11.8:python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11"
},
"product_reference": "python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-1062",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2024-01-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2261879"
}
],
"notes": [
{
"category": "description",
"text": "A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-DirSrv-11.8:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11",
"8Base-DirSrv-11.8:python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-1062"
},
{
"category": "external",
"summary": "RHBZ#2261879",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261879"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-1062",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-1062"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-1062",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1062"
},
{
"category": "external",
"summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2256711",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256711"
}
],
"release_date": "2024-01-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-07-02T08:02:32+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-DirSrv-11.8:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11",
"8Base-DirSrv-11.8:python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4209"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-DirSrv-11.8:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11",
"8Base-DirSrv-11.8:python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-DirSrv-11.8:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11",
"8Base-DirSrv-11.8:python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)"
},
{
"cve": "CVE-2024-2199",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-03-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2267976"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "LDAP servers are not usually exposed to the open internet, requiring adjacent connectivity for a successful attack. This issue also requires a compromised user account to perform the attack. Therefore, this flaw is rated as a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-DirSrv-11.8:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11",
"8Base-DirSrv-11.8:python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-2199"
},
{
"category": "external",
"summary": "RHBZ#2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-2199",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2199"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-07-02T08:02:32+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-DirSrv-11.8:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11",
"8Base-DirSrv-11.8:python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4209"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-DirSrv-11.8:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11",
"8Base-DirSrv-11.8:python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-DirSrv-11.8:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11",
"8Base-DirSrv-11.8:python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c"
},
{
"cve": "CVE-2024-3657",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-04-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2274401"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is categorized as an important severity issue rather than a critical one because, while it can cause a denial of service by stopping the directory service, it does not allow for remote code execution, privilege escalation, or data exfiltration. The impact is limited to service disruption, which can be mitigated by monitoring and automatic service restarts. Additionally, exploiting this vulnerability requires specific crafted packets, indicating that an attacker would need a certain level of knowledge and access to execute the attack, reducing the likelihood of widespread exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-DirSrv-11.8:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11",
"8Base-DirSrv-11.8:python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "RHBZ#2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-3657",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3657"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-07-02T08:02:32+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-DirSrv-11.8:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11",
"8Base-DirSrv-11.8:python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4209"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-DirSrv-11.8:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11",
"8Base-DirSrv-11.8:python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-DirSrv-11.8:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.src::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-debugsource-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-devel-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-legacy-tools-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-legacy-tools-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-libs-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-libs-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-snmp-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:389-ds-base-snmp-debuginfo-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.x86_64::redhat-ds:11",
"8Base-DirSrv-11.8:cockpit-389-ds-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11",
"8Base-DirSrv-11.8:python3-lib389-0:1.4.3.37-10.module+el8dsrv+21971+f7435891.noarch::redhat-ds:11"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request"
}
]
}
RHSA-2024_4210
Vulnerability from csaf_redhat - Published: 2024-07-02 08:19 - Updated: 2024-11-28 17:20Summary
Red Hat Security Advisory: redhat-ds:11 security update
Notes
Topic
An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.9 for RHEL 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration.
Security Fix(es):
* ns-slapd crashing in ldap_mods_free() (CVE-2024-2199) (BZ#2267976)
* Potential denial of service via specially crafted kerberos
AS-REQ request (CVE-2024-3657) (BZ#2274401)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.9 for RHEL 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration.\n\nSecurity Fix(es):\n\n* ns-slapd crashing in ldap_mods_free() (CVE-2024-2199) (BZ#2267976)\n\n* Potential denial of service via specially crafted kerberos\nAS-REQ request (CVE-2024-3657) (BZ#2274401)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:4210",
"url": "https://access.redhat.com/errata/RHSA-2024:4210"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4210.json"
}
],
"title": "Red Hat Security Advisory: redhat-ds:11 security update",
"tracking": {
"current_release_date": "2024-11-28T17:20:55+00:00",
"generator": {
"date": "2024-11-28T17:20:55+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2024:4210",
"initial_release_date": "2024-07-02T08:19:13+00:00",
"revision_history": [
{
"date": "2024-07-02T08:19:13+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-07-02T08:19:13+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-28T17:20:55+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Directory Server 11.9 for RHEL 8",
"product": {
"name": "Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:directory_server:11.9::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Directory Server"
},
{
"branches": [
{
"category": "product_version",
"name": "redhat-ds:11:8100020240604161237:37ed7c03",
"product": {
"name": "redhat-ds:11:8100020240604161237:37ed7c03",
"product_id": "redhat-ds:11:8100020240604161237:37ed7c03",
"product_identification_helper": {
"purl": "pkg:rpmmod/redhat/redhat-ds@11:8100020240604161237:37ed7c03"
}
}
},
{
"category": "product_version",
"name": "cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch",
"product": {
"name": "cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch",
"product_id": "cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cockpit-389-ds@1.4.3.39-4.module%2Bel8dsrv%2B21965%2B9ff26197?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch",
"product": {
"name": "python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch",
"product_id": "python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-lib389@1.4.3.39-4.module%2Bel8dsrv%2B21965%2B9ff26197?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src",
"product": {
"name": "389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src",
"product_id": "389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.39-4.module%2Bel8dsrv%2B21965%2B9ff26197?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product": {
"name": "389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product_id": "389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.39-4.module%2Bel8dsrv%2B21965%2B9ff26197?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product_id": "389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.39-4.module%2Bel8dsrv%2B21965%2B9ff26197?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product_id": "389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.39-4.module%2Bel8dsrv%2B21965%2B9ff26197?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product": {
"name": "389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product_id": "389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.39-4.module%2Bel8dsrv%2B21965%2B9ff26197?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.39-4.module%2Bel8dsrv%2B21965%2B9ff26197?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.39-4.module%2Bel8dsrv%2B21965%2B9ff26197?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product": {
"name": "389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product_id": "389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.39-4.module%2Bel8dsrv%2B21965%2B9ff26197?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.39-4.module%2Bel8dsrv%2B21965%2B9ff26197?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product_id": "389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.39-4.module%2Bel8dsrv%2B21965%2B9ff26197?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.39-4.module%2Bel8dsrv%2B21965%2B9ff26197?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "redhat-ds:11:8100020240604161237:37ed7c03 as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03"
},
"product_reference": "redhat-ds:11:8100020240604161237:37ed7c03",
"relates_to_product_reference": "8Base-DirSrv-11.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src as a component of redhat-ds:11:8100020240604161237:37ed7c03 as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src"
},
"product_reference": "389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src",
"relates_to_product_reference": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 as a component of redhat-ds:11:8100020240604161237:37ed7c03 as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64"
},
"product_reference": "389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 as a component of redhat-ds:11:8100020240604161237:37ed7c03 as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 as a component of redhat-ds:11:8100020240604161237:37ed7c03 as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 as a component of redhat-ds:11:8100020240604161237:37ed7c03 as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64"
},
"product_reference": "389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 as a component of redhat-ds:11:8100020240604161237:37ed7c03 as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 as a component of redhat-ds:11:8100020240604161237:37ed7c03 as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 as a component of redhat-ds:11:8100020240604161237:37ed7c03 as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64"
},
"product_reference": "389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 as a component of redhat-ds:11:8100020240604161237:37ed7c03 as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 as a component of redhat-ds:11:8100020240604161237:37ed7c03 as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 as a component of redhat-ds:11:8100020240604161237:37ed7c03 as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"relates_to_product_reference": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch as a component of redhat-ds:11:8100020240604161237:37ed7c03 as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch"
},
"product_reference": "cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch",
"relates_to_product_reference": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch as a component of redhat-ds:11:8100020240604161237:37ed7c03 as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch"
},
"product_reference": "python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch",
"relates_to_product_reference": "8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-2199",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-03-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2267976"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "LDAP servers are not usually exposed to the open internet, requiring adjacent connectivity for a successful attack. This issue also requires a compromised user account to perform the attack. Therefore, this flaw is rated as a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-2199"
},
{
"category": "external",
"summary": "RHBZ#2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-2199",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2199"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-07-02T08:19:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4210"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c"
},
{
"cve": "CVE-2024-3657",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-04-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2274401"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is categorized as an important severity issue rather than a critical one because, while it can cause a denial of service by stopping the directory service, it does not allow for remote code execution, privilege escalation, or data exfiltration. The impact is limited to service disruption, which can be mitigated by monitoring and automatic service restarts. Additionally, exploiting this vulnerability requires specific crafted packets, indicating that an attacker would need a certain level of knowledge and access to execute the attack, reducing the likelihood of widespread exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "RHBZ#2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-3657",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3657"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-07-02T08:19:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4210"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch",
"8Base-DirSrv-11.9:redhat-ds:11:8100020240604161237:37ed7c03:python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request"
}
]
}
RHSA-2024:4210
Vulnerability from csaf_redhat - Published: 2024-07-02 08:19 - Updated: 2025-11-21 19:04Summary
Red Hat Security Advisory: redhat-ds:11 security update
Notes
Topic
An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.9 for RHEL 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration.
Security Fix(es):
* ns-slapd crashing in ldap_mods_free() (CVE-2024-2199) (BZ#2267976)
* Potential denial of service via specially crafted kerberos
AS-REQ request (CVE-2024-3657) (BZ#2274401)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.9 for RHEL 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration.\n\nSecurity Fix(es):\n\n* ns-slapd crashing in ldap_mods_free() (CVE-2024-2199) (BZ#2267976)\n\n* Potential denial of service via specially crafted kerberos\nAS-REQ request (CVE-2024-3657) (BZ#2274401)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:4210",
"url": "https://access.redhat.com/errata/RHSA-2024:4210"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4210.json"
}
],
"title": "Red Hat Security Advisory: redhat-ds:11 security update",
"tracking": {
"current_release_date": "2025-11-21T19:04:52+00:00",
"generator": {
"date": "2025-11-21T19:04:52+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2024:4210",
"initial_release_date": "2024-07-02T08:19:13+00:00",
"revision_history": [
{
"date": "2024-07-02T08:19:13+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-07-02T08:19:13+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T19:04:52+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Directory Server 11.9 for RHEL 8",
"product": {
"name": "Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:directory_server:11.9::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Directory Server"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src::redhat-ds:11",
"product": {
"name": "389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src (redhat-ds:11)",
"product_id": "389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.39-4.module%2Bel8dsrv%2B21965%2B9ff26197?arch=src\u0026rpmmod=redhat-ds:11:8100020240604161237:37ed7c03"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.39-4.module%2Bel8dsrv%2B21965%2B9ff26197?arch=x86_64\u0026rpmmod=redhat-ds:11:8100020240604161237:37ed7c03"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.39-4.module%2Bel8dsrv%2B21965%2B9ff26197?arch=x86_64\u0026rpmmod=redhat-ds:11:8100020240604161237:37ed7c03"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.39-4.module%2Bel8dsrv%2B21965%2B9ff26197?arch=x86_64\u0026rpmmod=redhat-ds:11:8100020240604161237:37ed7c03"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.39-4.module%2Bel8dsrv%2B21965%2B9ff26197?arch=x86_64\u0026rpmmod=redhat-ds:11:8100020240604161237:37ed7c03"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.39-4.module%2Bel8dsrv%2B21965%2B9ff26197?arch=x86_64\u0026rpmmod=redhat-ds:11:8100020240604161237:37ed7c03"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.39-4.module%2Bel8dsrv%2B21965%2B9ff26197?arch=x86_64\u0026rpmmod=redhat-ds:11:8100020240604161237:37ed7c03"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.39-4.module%2Bel8dsrv%2B21965%2B9ff26197?arch=x86_64\u0026rpmmod=redhat-ds:11:8100020240604161237:37ed7c03"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.39-4.module%2Bel8dsrv%2B21965%2B9ff26197?arch=x86_64\u0026rpmmod=redhat-ds:11:8100020240604161237:37ed7c03"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.39-4.module%2Bel8dsrv%2B21965%2B9ff26197?arch=x86_64\u0026rpmmod=redhat-ds:11:8100020240604161237:37ed7c03"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 (redhat-ds:11)",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.39-4.module%2Bel8dsrv%2B21965%2B9ff26197?arch=x86_64\u0026rpmmod=redhat-ds:11:8100020240604161237:37ed7c03"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch::redhat-ds:11",
"product": {
"name": "cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch (redhat-ds:11)",
"product_id": "cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cockpit-389-ds@1.4.3.39-4.module%2Bel8dsrv%2B21965%2B9ff26197?arch=noarch\u0026rpmmod=redhat-ds:11:8100020240604161237:37ed7c03"
}
}
},
{
"category": "product_version",
"name": "python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch::redhat-ds:11",
"product": {
"name": "python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch (redhat-ds:11)",
"product_id": "python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch::redhat-ds:11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-lib389@1.4.3.39-4.module%2Bel8dsrv%2B21965%2B9ff26197?arch=noarch\u0026rpmmod=redhat-ds:11:8100020240604161237:37ed7c03"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src (redhat-ds:11) as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src::redhat-ds:11"
},
"product_reference": "389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch (redhat-ds:11) as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch::redhat-ds:11"
},
"product_reference": "cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch (redhat-ds:11) as a component of Red Hat Directory Server 11.9 for RHEL 8",
"product_id": "8Base-DirSrv-11.9:python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch::redhat-ds:11"
},
"product_reference": "python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch::redhat-ds:11",
"relates_to_product_reference": "8Base-DirSrv-11.9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-2199",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-03-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2267976"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "LDAP servers are not usually exposed to the open internet, requiring adjacent connectivity for a successful attack. This issue also requires a compromised user account to perform the attack. Therefore, this flaw is rated as a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-DirSrv-11.9:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch::redhat-ds:11",
"8Base-DirSrv-11.9:python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch::redhat-ds:11"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-2199"
},
{
"category": "external",
"summary": "RHBZ#2267976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267976"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-2199",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2199"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2199"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-07-02T08:19:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-DirSrv-11.9:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch::redhat-ds:11",
"8Base-DirSrv-11.9:python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch::redhat-ds:11"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4210"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-DirSrv-11.9:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch::redhat-ds:11",
"8Base-DirSrv-11.9:python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch::redhat-ds:11"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-DirSrv-11.9:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch::redhat-ds:11",
"8Base-DirSrv-11.9:python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch::redhat-ds:11"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c"
},
{
"cve": "CVE-2024-3657",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-04-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2274401"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is categorized as an important severity issue rather than a critical one because, while it can cause a denial of service by stopping the directory service, it does not allow for remote code execution, privilege escalation, or data exfiltration. The impact is limited to service disruption, which can be mitigated by monitoring and automatic service restarts. Additionally, exploiting this vulnerability requires specific crafted packets, indicating that an attacker would need a certain level of knowledge and access to execute the attack, reducing the likelihood of widespread exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-DirSrv-11.9:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch::redhat-ds:11",
"8Base-DirSrv-11.9:python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch::redhat-ds:11"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "RHBZ#2274401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-3657",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3657"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3657"
}
],
"release_date": "2024-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-07-02T08:19:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-DirSrv-11.9:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch::redhat-ds:11",
"8Base-DirSrv-11.9:python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch::redhat-ds:11"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4210"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-DirSrv-11.9:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch::redhat-ds:11",
"8Base-DirSrv-11.9:python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch::redhat-ds:11"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-DirSrv-11.9:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.src::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-debugsource-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-devel-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-legacy-tools-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-libs-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-libs-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-snmp-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:389-ds-base-snmp-debuginfo-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.x86_64::redhat-ds:11",
"8Base-DirSrv-11.9:cockpit-389-ds-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch::redhat-ds:11",
"8Base-DirSrv-11.9:python3-lib389-0:1.4.3.39-4.module+el8dsrv+21965+9ff26197.noarch::redhat-ds:11"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request"
}
]
}
SUSE-SU-2024:3843-1
Vulnerability from csaf_suse - Published: 2024-10-31 08:50 - Updated: 2024-10-31 08:50Summary
Security update for 389-ds
Notes
Title of the patch
Security update for 389-ds
Description of the patch
This update for 389-ds fixes the following issues:
- Persist extracted key path for ldap_ssl_client_init over repeat invocations (bsc#1230852)
- Re-enable use of .dsrc basedn for dsidm commands (bsc#1231462)
- Update to version 2.2.10~git18.20ce9289:
* RFE: Use previously extracted key path
* Update dsidm to prioritize basedn from .dsrc over interactive input
* UI: Instance fails to load when DB backup directory doesn't exist
* Improve online import robustness when the server is under load
* Ensure all slapi_log_err calls end format strings with newline character \n
* RFE: when memberof is enabled, defer updates of members from the update of the group
* Provide more information in the error message during setup_ol_tls_conn()
* Wrong set of entries returned for some search filters
* Schema lib389 object is not keeping custom schema data upon editing
* UI: Fix audit issue with npm - micromatch
* Fix long delay when setting replication agreement with dsconf
* Changelog trims updates from a given RID even if a consumer has not received any of them
* test_password_modify_non_utf8 should set default password storage scheme
* Update Cargo.lock
* Rearrange includes for 32-bit support logic
* Fix fedora cop RawHide builds
* Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console
* Enabling replication for a sub suffix crashes browser
* d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes
* Slow ldif2db import on a newly created BDB backend
* Audit log buffering doesn't handle large updates
* RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members)
* passwordHistory is not updated with a pre-hashed password
* ns-slapd crash in referint_get_config
* Fix the UTC offset print
* Fix OpenLDAP version autodetection
* RFE: add new operation note for MFA authentications
* Add log buffering to audit log
* Fix connection timeout error breaking errormap
* Improve dsidm CLI No Such Entry handling
* Improve connection timeout error logging
* Add hidden -v and -j options to each CLI subcommand
* Fix various issues with logconv.pl
* Fix certificate lifetime displayed as NaN
* Enhance Rust and JS bundling and add SPDX licenses for both
* Remove audit-ci from dependencies
* Fix unused variable warning from previous commit
* covscan: fix memory leak in audit log when adding entries
* Add a check for tagged commits
* dscreate ds-root - accepts relative path
* Change replica_id from str to int
* Attribute Names changed to lowercase after adding the Attributes
* ns-slapd crashes at startup if a backend has no suffix
* During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it
* Reversion of the entry cache should be limited to BETXN plugin failures
* Disable Transparent Huge Pages
* Freelist ordering causes high wtime
* Security fix for CVE-2024-2199
- VUL-0: CVE-2024-3657: 389-ds: potential denial of service via specially crafted kerberos AS-REQ request (bsc#1225512)
- VUL-0: CVE-2024-5953: 389-ds: malformed userPassword hashes may cause a denial of service (bsc#1226277)
- 389ds crash when user does change password using iso-8859-1 encoding (bsc#1228912)
Patchnames
SUSE-2024-3843,SUSE-SLE-Module-Server-Applications-15-SP5-2024-3843,openSUSE-SLE-15.5-2024-3843
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for 389-ds",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for 389-ds fixes the following issues:\n\n- Persist extracted key path for ldap_ssl_client_init over repeat invocations (bsc#1230852)\n- Re-enable use of .dsrc basedn for dsidm commands (bsc#1231462)\n- Update to version 2.2.10~git18.20ce9289:\n * RFE: Use previously extracted key path\n * Update dsidm to prioritize basedn from .dsrc over interactive input\n * UI: Instance fails to load when DB backup directory doesn\u0027t exist\n * Improve online import robustness when the server is under load\n * Ensure all slapi_log_err calls end format strings with newline character \\n\n * RFE: when memberof is enabled, defer updates of members from the update of the group\n * Provide more information in the error message during setup_ol_tls_conn()\n * Wrong set of entries returned for some search filters\n * Schema lib389 object is not keeping custom schema data upon editing\n * UI: Fix audit issue with npm - micromatch\n * Fix long delay when setting replication agreement with dsconf\n * Changelog trims updates from a given RID even if a consumer has not received any of them\n * test_password_modify_non_utf8 should set default password storage scheme\n * Update Cargo.lock\n * Rearrange includes for 32-bit support logic\n * Fix fedora cop RawHide builds\n * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console\n * Enabling replication for a sub suffix crashes browser\n * d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes\n * Slow ldif2db import on a newly created BDB backend\n * Audit log buffering doesn\u0027t handle large updates\n * RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members)\n * passwordHistory is not updated with a pre-hashed password\n * ns-slapd crash in referint_get_config\n * Fix the UTC offset print\n * Fix OpenLDAP version autodetection\n * RFE: add new operation note for MFA authentications\n * Add log buffering to audit log\n * Fix connection timeout error breaking errormap\n * Improve dsidm CLI No Such Entry handling\n * Improve connection timeout error logging\n * Add hidden -v and -j options to each CLI subcommand\n * Fix various issues with logconv.pl\n * Fix certificate lifetime displayed as NaN\n * Enhance Rust and JS bundling and add SPDX licenses for both\n * Remove audit-ci from dependencies\n * Fix unused variable warning from previous commit\n * covscan: fix memory leak in audit log when adding entries\n * Add a check for tagged commits\n * dscreate ds-root - accepts relative path\n * Change replica_id from str to int\n * Attribute Names changed to lowercase after adding the Attributes\n * ns-slapd crashes at startup if a backend has no suffix\n * During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it\n * Reversion of the entry cache should be limited to BETXN plugin failures\n * Disable Transparent Huge Pages\n * Freelist ordering causes high wtime\n * Security fix for CVE-2024-2199\n- VUL-0: CVE-2024-3657: 389-ds: potential denial of service via specially crafted kerberos AS-REQ request (bsc#1225512)\n- VUL-0: CVE-2024-5953: 389-ds: malformed userPassword hashes may cause a denial of service (bsc#1226277)\n- 389ds crash when user does change password using iso-8859-1 encoding (bsc#1228912)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-3843,SUSE-SLE-Module-Server-Applications-15-SP5-2024-3843,openSUSE-SLE-15.5-2024-3843",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_3843-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:3843-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20243843-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:3843-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-October/019746.html"
},
{
"category": "self",
"summary": "SUSE Bug 1230852",
"url": "https://bugzilla.suse.com/1230852"
},
{
"category": "self",
"summary": "SUSE Bug 1231462",
"url": "https://bugzilla.suse.com/1231462"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-2199 page",
"url": "https://www.suse.com/security/cve/CVE-2024-2199/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-3657 page",
"url": "https://www.suse.com/security/cve/CVE-2024-3657/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-5953 page",
"url": "https://www.suse.com/security/cve/CVE-2024-5953/"
}
],
"title": "Security update for 389-ds",
"tracking": {
"current_release_date": "2024-10-31T08:50:06Z",
"generator": {
"date": "2024-10-31T08:50:06Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:3843-1",
"initial_release_date": "2024-10-31T08:50:06Z",
"revision_history": [
{
"date": "2024-10-31T08:50:06Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"product": {
"name": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"product_id": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64"
}
},
{
"category": "product_version",
"name": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"product": {
"name": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"product_id": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"product": {
"name": "389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"product_id": "389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.aarch64"
}
},
{
"category": "product_version",
"name": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"product": {
"name": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"product_id": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64"
}
},
{
"category": "product_version",
"name": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"product": {
"name": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"product_id": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"product": {
"name": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"product_id": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le"
}
},
{
"category": "product_version",
"name": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"product": {
"name": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"product_id": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"product": {
"name": "389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"product_id": "389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le"
}
},
{
"category": "product_version",
"name": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"product": {
"name": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"product_id": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"product": {
"name": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"product_id": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"product": {
"name": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"product_id": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x"
}
},
{
"category": "product_version",
"name": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"product": {
"name": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"product_id": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"product": {
"name": "389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"product_id": "389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.s390x"
}
},
{
"category": "product_version",
"name": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"product": {
"name": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"product_id": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x"
}
},
{
"category": "product_version",
"name": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"product": {
"name": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"product_id": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"product": {
"name": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"product_id": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64"
}
},
{
"category": "product_version",
"name": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"product": {
"name": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"product_id": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"product": {
"name": "389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"product_id": "389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.x86_64"
}
},
{
"category": "product_version",
"name": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"product": {
"name": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"product_id": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64"
}
},
{
"category": "product_version",
"name": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"product": {
"name": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"product_id": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-server-applications:15:sp5"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.5",
"product": {
"name": "openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64"
},
"product_reference": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le"
},
"product_reference": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x"
},
"product_reference": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64"
},
"product_reference": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64"
},
"product_reference": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le"
},
"product_reference": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x"
},
"product_reference": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64"
},
"product_reference": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64"
},
"product_reference": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le"
},
"product_reference": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x"
},
"product_reference": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64"
},
"product_reference": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64"
},
"product_reference": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le"
},
"product_reference": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x"
},
"product_reference": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64"
},
"product_reference": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64"
},
"product_reference": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le"
},
"product_reference": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x"
},
"product_reference": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64"
},
"product_reference": "389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64"
},
"product_reference": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le"
},
"product_reference": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x"
},
"product_reference": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64"
},
"product_reference": "389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.aarch64"
},
"product_reference": "389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le"
},
"product_reference": "389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.s390x"
},
"product_reference": "389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.x86_64"
},
"product_reference": "389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64"
},
"product_reference": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le"
},
"product_reference": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x"
},
"product_reference": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64"
},
"product_reference": "lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64"
},
"product_reference": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le"
},
"product_reference": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x"
},
"product_reference": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64"
},
"product_reference": "libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-2199",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-2199"
}
],
"notes": [
{
"category": "general",
"text": "A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-2199",
"url": "https://www.suse.com/security/cve/CVE-2024-2199"
},
{
"category": "external",
"summary": "SUSE Bug 1225507 for CVE-2024-2199",
"url": "https://bugzilla.suse.com/1225507"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-31T08:50:06Z",
"details": "moderate"
}
],
"title": "CVE-2024-2199"
},
{
"cve": "CVE-2024-3657",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-3657"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-3657",
"url": "https://www.suse.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "SUSE Bug 1225512 for CVE-2024-3657",
"url": "https://bugzilla.suse.com/1225512"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-31T08:50:06Z",
"details": "important"
}
],
"title": "CVE-2024-3657"
},
{
"cve": "CVE-2024-5953",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-5953"
}
],
"notes": [
{
"category": "general",
"text": "A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-5953",
"url": "https://www.suse.com/security/cve/CVE-2024-5953"
},
{
"category": "external",
"summary": "SUSE Bug 1226277 for CVE-2024-5953",
"url": "https://bugzilla.suse.com/1226277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:lib389-2.2.10~git18.20ce9289-150500.3.24.1.x86_64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.aarch64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.ppc64le",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.s390x",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-31T08:50:06Z",
"details": "moderate"
}
],
"title": "CVE-2024-5953"
}
]
}
SUSE-SU-2024:3844-1
Vulnerability from csaf_suse - Published: 2024-10-31 08:50 - Updated: 2024-10-31 08:50Summary
Security update for 389-ds
Notes
Title of the patch
Security update for 389-ds
Description of the patch
This update for 389-ds fixes the following issues:
- Persist extracted key path for ldap_ssl_client_init over repeat invocations (bsc#1230852)
- Re-enable use of .dsrc basedn for dsidm commands (bsc#1231462)
- Update to version 2.2.10~git18.20ce9289:
* RFE: Use previously extracted key path
* Update dsidm to prioritize basedn from .dsrc over interactive input
* UI: Instance fails to load when DB backup directory doesn't exist
* Improve online import robustness when the server is under load
* Ensure all slapi_log_err calls end format strings with newline character \n
* RFE: when memberof is enabled, defer updates of members from the update of the group
* Provide more information in the error message during setup_ol_tls_conn()
* Wrong set of entries returned for some search filters
* Schema lib389 object is not keeping custom schema data upon editing
* UI: Fix audit issue with npm - micromatch
* Fix long delay when setting replication agreement with dsconf
* Changelog trims updates from a given RID even if a consumer has not received any of them
* test_password_modify_non_utf8 should set default password storage scheme
* Update Cargo.lock
* Rearrange includes for 32-bit support logic
* Fix fedora cop RawHide builds
* Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console
* Enabling replication for a sub suffix crashes browser
* d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes
* Slow ldif2db import on a newly created BDB backend
* Audit log buffering doesn't handle large updates
* RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members)
* passwordHistory is not updated with a pre-hashed password
* ns-slapd crash in referint_get_config
* Fix the UTC offset print
* Fix OpenLDAP version autodetection
* RFE: add new operation note for MFA authentications
* Add log buffering to audit log
* Fix connection timeout error breaking errormap
* Improve dsidm CLI No Such Entry handling
* Improve connection timeout error logging
* Add hidden -v and -j options to each CLI subcommand
* Fix various issues with logconv.pl
* Fix certificate lifetime displayed as NaN
* Enhance Rust and JS bundling and add SPDX licenses for both
* Remove audit-ci from dependencies
* Fix unused variable warning from previous commit
* covscan: fix memory leak in audit log when adding entries
* Add a check for tagged commits
* dscreate ds-root - accepts relative path
* Change replica_id from str to int
* Attribute Names changed to lowercase after adding the Attributes
* ns-slapd crashes at startup if a backend has no suffix
* During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it
* Reversion of the entry cache should be limited to BETXN plugin failures
* Disable Transparent Huge Pages
* Freelist ordering causes high wtime
* Security fix for CVE-2024-2199
- VUL-0: CVE-2024-3657: 389-ds: potential denial of service via specially crafted kerberos AS-REQ request (bsc#1225512)
- VUL-0: CVE-2024-5953: 389-ds: malformed userPassword hashes may cause a denial of service (bsc#1226277)
- 389ds crash when user does change password using iso-8859-1 encoding (bsc#1228912)
Patchnames
SUSE-2024-3844,SUSE-SLE-Module-Server-Applications-15-SP6-2024-3844,openSUSE-SLE-15.6-2024-3844
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for 389-ds",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for 389-ds fixes the following issues:\n\n- Persist extracted key path for ldap_ssl_client_init over repeat invocations (bsc#1230852)\n- Re-enable use of .dsrc basedn for dsidm commands (bsc#1231462)\n- Update to version 2.2.10~git18.20ce9289:\n * RFE: Use previously extracted key path\n * Update dsidm to prioritize basedn from .dsrc over interactive input\n * UI: Instance fails to load when DB backup directory doesn\u0027t exist\n * Improve online import robustness when the server is under load\n * Ensure all slapi_log_err calls end format strings with newline character \\n\n * RFE: when memberof is enabled, defer updates of members from the update of the group\n * Provide more information in the error message during setup_ol_tls_conn()\n * Wrong set of entries returned for some search filters\n * Schema lib389 object is not keeping custom schema data upon editing\n * UI: Fix audit issue with npm - micromatch\n * Fix long delay when setting replication agreement with dsconf\n * Changelog trims updates from a given RID even if a consumer has not received any of them\n * test_password_modify_non_utf8 should set default password storage scheme\n * Update Cargo.lock\n * Rearrange includes for 32-bit support logic\n * Fix fedora cop RawHide builds\n * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console\n * Enabling replication for a sub suffix crashes browser\n * d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes\n * Slow ldif2db import on a newly created BDB backend\n * Audit log buffering doesn\u0027t handle large updates\n * RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members)\n * passwordHistory is not updated with a pre-hashed password\n * ns-slapd crash in referint_get_config\n * Fix the UTC offset print\n * Fix OpenLDAP version autodetection\n * RFE: add new operation note for MFA authentications\n * Add log buffering to audit log\n * Fix connection timeout error breaking errormap\n * Improve dsidm CLI No Such Entry handling\n * Improve connection timeout error logging\n * Add hidden -v and -j options to each CLI subcommand\n * Fix various issues with logconv.pl\n * Fix certificate lifetime displayed as NaN\n * Enhance Rust and JS bundling and add SPDX licenses for both\n * Remove audit-ci from dependencies\n * Fix unused variable warning from previous commit\n * covscan: fix memory leak in audit log when adding entries\n * Add a check for tagged commits\n * dscreate ds-root - accepts relative path\n * Change replica_id from str to int\n * Attribute Names changed to lowercase after adding the Attributes\n * ns-slapd crashes at startup if a backend has no suffix\n * During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it\n * Reversion of the entry cache should be limited to BETXN plugin failures\n * Disable Transparent Huge Pages\n * Freelist ordering causes high wtime\n * Security fix for CVE-2024-2199\n- VUL-0: CVE-2024-3657: 389-ds: potential denial of service via specially crafted kerberos AS-REQ request (bsc#1225512)\n- VUL-0: CVE-2024-5953: 389-ds: malformed userPassword hashes may cause a denial of service (bsc#1226277)\n- 389ds crash when user does change password using iso-8859-1 encoding (bsc#1228912)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-3844,SUSE-SLE-Module-Server-Applications-15-SP6-2024-3844,openSUSE-SLE-15.6-2024-3844",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_3844-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:3844-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20243844-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:3844-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-October/019745.html"
},
{
"category": "self",
"summary": "SUSE Bug 1225512",
"url": "https://bugzilla.suse.com/1225512"
},
{
"category": "self",
"summary": "SUSE Bug 1226277",
"url": "https://bugzilla.suse.com/1226277"
},
{
"category": "self",
"summary": "SUSE Bug 1228912",
"url": "https://bugzilla.suse.com/1228912"
},
{
"category": "self",
"summary": "SUSE Bug 1230852",
"url": "https://bugzilla.suse.com/1230852"
},
{
"category": "self",
"summary": "SUSE Bug 1231462",
"url": "https://bugzilla.suse.com/1231462"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-2199 page",
"url": "https://www.suse.com/security/cve/CVE-2024-2199/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-3657 page",
"url": "https://www.suse.com/security/cve/CVE-2024-3657/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-5953 page",
"url": "https://www.suse.com/security/cve/CVE-2024-5953/"
}
],
"title": "Security update for 389-ds",
"tracking": {
"current_release_date": "2024-10-31T08:50:21Z",
"generator": {
"date": "2024-10-31T08:50:21Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:3844-1",
"initial_release_date": "2024-10-31T08:50:21Z",
"revision_history": [
{
"date": "2024-10-31T08:50:21Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"product": {
"name": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"product_id": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64"
}
},
{
"category": "product_version",
"name": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"product": {
"name": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"product_id": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"product": {
"name": "389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"product_id": "389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.aarch64"
}
},
{
"category": "product_version",
"name": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"product": {
"name": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"product_id": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64"
}
},
{
"category": "product_version",
"name": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"product": {
"name": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"product_id": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"product": {
"name": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"product_id": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le"
}
},
{
"category": "product_version",
"name": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"product": {
"name": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"product_id": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"product": {
"name": "389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"product_id": "389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le"
}
},
{
"category": "product_version",
"name": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"product": {
"name": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"product_id": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"product": {
"name": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"product_id": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"product": {
"name": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"product_id": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x"
}
},
{
"category": "product_version",
"name": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"product": {
"name": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"product_id": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"product": {
"name": "389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"product_id": "389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.s390x"
}
},
{
"category": "product_version",
"name": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"product": {
"name": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"product_id": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x"
}
},
{
"category": "product_version",
"name": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"product": {
"name": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"product_id": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"product": {
"name": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"product_id": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64"
}
},
{
"category": "product_version",
"name": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"product": {
"name": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"product_id": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"product": {
"name": "389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"product_id": "389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.x86_64"
}
},
{
"category": "product_version",
"name": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"product": {
"name": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"product_id": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64"
}
},
{
"category": "product_version",
"name": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"product": {
"name": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"product_id": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-server-applications:15:sp6"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.6",
"product": {
"name": "openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.6"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64"
},
"product_reference": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le"
},
"product_reference": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x"
},
"product_reference": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64"
},
"product_reference": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64"
},
"product_reference": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le"
},
"product_reference": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x"
},
"product_reference": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64"
},
"product_reference": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64"
},
"product_reference": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le"
},
"product_reference": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x"
},
"product_reference": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64"
},
"product_reference": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64"
},
"product_reference": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le"
},
"product_reference": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x"
},
"product_reference": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64"
},
"product_reference": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64"
},
"product_reference": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le"
},
"product_reference": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x"
},
"product_reference": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64"
},
"product_reference": "389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64"
},
"product_reference": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le"
},
"product_reference": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x"
},
"product_reference": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64"
},
"product_reference": "389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.aarch64"
},
"product_reference": "389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le"
},
"product_reference": "389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.s390x"
},
"product_reference": "389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.x86_64"
},
"product_reference": "389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64"
},
"product_reference": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le"
},
"product_reference": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x"
},
"product_reference": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64"
},
"product_reference": "lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64"
},
"product_reference": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le"
},
"product_reference": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x"
},
"product_reference": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64"
},
"product_reference": "libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-2199",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-2199"
}
],
"notes": [
{
"category": "general",
"text": "A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-2199",
"url": "https://www.suse.com/security/cve/CVE-2024-2199"
},
{
"category": "external",
"summary": "SUSE Bug 1225507 for CVE-2024-2199",
"url": "https://bugzilla.suse.com/1225507"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-31T08:50:21Z",
"details": "moderate"
}
],
"title": "CVE-2024-2199"
},
{
"cve": "CVE-2024-3657",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-3657"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-3657",
"url": "https://www.suse.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "SUSE Bug 1225512 for CVE-2024-3657",
"url": "https://bugzilla.suse.com/1225512"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-31T08:50:21Z",
"details": "important"
}
],
"title": "CVE-2024-3657"
},
{
"cve": "CVE-2024-5953",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-5953"
}
],
"notes": [
{
"category": "general",
"text": "A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-5953",
"url": "https://www.suse.com/security/cve/CVE-2024-5953"
},
{
"category": "external",
"summary": "SUSE Bug 1226277 for CVE-2024-5953",
"url": "https://bugzilla.suse.com/1226277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:lib389-2.2.10~git18.20ce9289-150600.8.10.1.x86_64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.aarch64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.ppc64le",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.s390x",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-31T08:50:21Z",
"details": "moderate"
}
],
"title": "CVE-2024-5953"
}
]
}
SUSE-SU-2024:3082-1
Vulnerability from csaf_suse - Published: 2024-09-02 14:44 - Updated: 2024-09-02 14:44Summary
Security update for 389-ds
Notes
Title of the patch
Security update for 389-ds
Description of the patch
This update for 389-ds fixes the following issues:
Security issues fixed:
- CVE-2024-3657: Fixed potential denial of service via specially crafted kerberos AS-REQ request (bsc#1225512)
- CVE-2024-5953: Fixed a denial of service caused by malformed userPassword hashes (bsc#1226277)
- CVE-2024-2199: Fixed a crash caused by malformed userPassword in do_modify() (bsc#1225507)
Non-security issues fixed:
- crash when user does change password using iso-8859-1 encoding (bsc#1228912)
- Update to version 2.2.10~git2.345056d3:
* Issue 2324 - Add a CI test (#6289)
* Issue 6284 - BUG - freelist ordering causes high wtime
- Update to version 2.2.10~git0.4d7218b7:
* Bump version to 2.2.10
* Issue 5327 - Fix test metadata
* Issue 5853 - Update Cargo.lock
* Issue 5962 - Rearrange includes for 32-bit support logic
* Issue 5973 - Fix fedora cop RawHide builds (#5974)
* Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console
* Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255)
* Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225)
* Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208)
* Issue 6170 - audit log buffering doesn't handle large updates
* Issue 6193 - Test failure: test_tls_command_returns_error_text
* Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: '/var/cache/dnf/metadata_lock.pid'`
* Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173)
* Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093)
* Issue 6080 - ns-slapd crash in referint_get_config (#6081)
* Issue 6117 - Fix the UTC offset print (#6118)
* Issue 5305 - OpenLDAP version autodetection doesn't work
* Issue 6112 - RFE - add new operation note for MFA authentications
* Issue 5842 - Add log buffering to audit log
* Issue 6103 - New connection timeout error breaks errormap (#6104)
* Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079)
* Issue 6096 - Improve connection timeout error logging (#6097)
* Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088)
* Issue 5487 - Fix various isses with logconv.pl (#6085)
Patchnames
SUSE-2024-3082,SUSE-SLE-Module-Server-Applications-15-SP5-2024-3082,openSUSE-SLE-15.5-2024-3082
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for 389-ds",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for 389-ds fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2024-3657: Fixed potential denial of service via specially crafted kerberos AS-REQ request (bsc#1225512)\n- CVE-2024-5953: Fixed a denial of service caused by malformed userPassword hashes (bsc#1226277)\n- CVE-2024-2199: Fixed a crash caused by malformed userPassword in do_modify() (bsc#1225507)\n\nNon-security issues fixed:\n\n- crash when user does change password using iso-8859-1 encoding (bsc#1228912)\n\n- Update to version 2.2.10~git2.345056d3:\n * Issue 2324 - Add a CI test (#6289)\n * Issue 6284 - BUG - freelist ordering causes high wtime\n\n- Update to version 2.2.10~git0.4d7218b7:\n * Bump version to 2.2.10\n * Issue 5327 - Fix test metadata\n * Issue 5853 - Update Cargo.lock\n * Issue 5962 - Rearrange includes for 32-bit support logic\n * Issue 5973 - Fix fedora cop RawHide builds (#5974)\n * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console\n * Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255)\n * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225)\n * Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208)\n * Issue 6170 - audit log buffering doesn\u0027t handle large updates\n * Issue 6193 - Test failure: test_tls_command_returns_error_text\n * Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: \u0027/var/cache/dnf/metadata_lock.pid\u0027`\n * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173)\n * Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093)\n * Issue 6080 - ns-slapd crash in referint_get_config (#6081)\n * Issue 6117 - Fix the UTC offset print (#6118)\n * Issue 5305 - OpenLDAP version autodetection doesn\u0027t work\n * Issue 6112 - RFE - add new operation note for MFA authentications\n * Issue 5842 - Add log buffering to audit log\n * Issue 6103 - New connection timeout error breaks errormap (#6104)\n * Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079)\n * Issue 6096 - Improve connection timeout error logging (#6097)\n * Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088)\n * Issue 5487 - Fix various isses with logconv.pl (#6085)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-3082,SUSE-SLE-Module-Server-Applications-15-SP5-2024-3082,openSUSE-SLE-15.5-2024-3082",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_3082-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:3082-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20243082-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:3082-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2024-September/036720.html"
},
{
"category": "self",
"summary": "SUSE Bug 1225507",
"url": "https://bugzilla.suse.com/1225507"
},
{
"category": "self",
"summary": "SUSE Bug 1225512",
"url": "https://bugzilla.suse.com/1225512"
},
{
"category": "self",
"summary": "SUSE Bug 1226277",
"url": "https://bugzilla.suse.com/1226277"
},
{
"category": "self",
"summary": "SUSE Bug 1228912",
"url": "https://bugzilla.suse.com/1228912"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-2199 page",
"url": "https://www.suse.com/security/cve/CVE-2024-2199/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-3657 page",
"url": "https://www.suse.com/security/cve/CVE-2024-3657/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-5953 page",
"url": "https://www.suse.com/security/cve/CVE-2024-5953/"
}
],
"title": "Security update for 389-ds",
"tracking": {
"current_release_date": "2024-09-02T14:44:56Z",
"generator": {
"date": "2024-09-02T14:44:56Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:3082-1",
"initial_release_date": "2024-09-02T14:44:56Z",
"revision_history": [
{
"date": "2024-09-02T14:44:56Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"product": {
"name": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"product_id": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64"
}
},
{
"category": "product_version",
"name": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"product": {
"name": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"product_id": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"product": {
"name": "389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"product_id": "389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.aarch64"
}
},
{
"category": "product_version",
"name": "lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"product": {
"name": "lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"product_id": "lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64"
}
},
{
"category": "product_version",
"name": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"product": {
"name": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"product_id": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"product": {
"name": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"product_id": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le"
}
},
{
"category": "product_version",
"name": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"product": {
"name": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"product_id": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"product": {
"name": "389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"product_id": "389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.ppc64le"
}
},
{
"category": "product_version",
"name": "lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"product": {
"name": "lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"product_id": "lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"product": {
"name": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"product_id": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"product": {
"name": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"product_id": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x"
}
},
{
"category": "product_version",
"name": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"product": {
"name": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"product_id": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"product": {
"name": "389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"product_id": "389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.s390x"
}
},
{
"category": "product_version",
"name": "lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"product": {
"name": "lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"product_id": "lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x"
}
},
{
"category": "product_version",
"name": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"product": {
"name": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"product_id": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"product": {
"name": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"product_id": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"product": {
"name": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"product_id": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"product": {
"name": "389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"product_id": "389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"product": {
"name": "lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"product_id": "lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"product": {
"name": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"product_id": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-server-applications:15:sp5"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.5",
"product": {
"name": "openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64"
},
"product_reference": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le"
},
"product_reference": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x"
},
"product_reference": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64"
},
"product_reference": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64"
},
"product_reference": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le"
},
"product_reference": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x"
},
"product_reference": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64"
},
"product_reference": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64"
},
"product_reference": "lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le"
},
"product_reference": "lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x"
},
"product_reference": "lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64"
},
"product_reference": "lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64"
},
"product_reference": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le"
},
"product_reference": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x"
},
"product_reference": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64"
},
"product_reference": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64"
},
"product_reference": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le"
},
"product_reference": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x"
},
"product_reference": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64"
},
"product_reference": "389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64"
},
"product_reference": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le"
},
"product_reference": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x"
},
"product_reference": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64"
},
"product_reference": "389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.aarch64"
},
"product_reference": "389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.ppc64le"
},
"product_reference": "389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.s390x"
},
"product_reference": "389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.x86_64"
},
"product_reference": "389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64"
},
"product_reference": "lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le"
},
"product_reference": "lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x"
},
"product_reference": "lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64"
},
"product_reference": "lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64"
},
"product_reference": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le"
},
"product_reference": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x"
},
"product_reference": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64"
},
"product_reference": "libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-2199",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-2199"
}
],
"notes": [
{
"category": "general",
"text": "A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-2199",
"url": "https://www.suse.com/security/cve/CVE-2024-2199"
},
{
"category": "external",
"summary": "SUSE Bug 1225507 for CVE-2024-2199",
"url": "https://bugzilla.suse.com/1225507"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-02T14:44:56Z",
"details": "moderate"
}
],
"title": "CVE-2024-2199"
},
{
"cve": "CVE-2024-3657",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-3657"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-3657",
"url": "https://www.suse.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "SUSE Bug 1225512 for CVE-2024-3657",
"url": "https://bugzilla.suse.com/1225512"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-02T14:44:56Z",
"details": "important"
}
],
"title": "CVE-2024-3657"
},
{
"cve": "CVE-2024-5953",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-5953"
}
],
"notes": [
{
"category": "general",
"text": "A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-5953",
"url": "https://www.suse.com/security/cve/CVE-2024-5953"
},
{
"category": "external",
"summary": "SUSE Bug 1226277 for CVE-2024-5953",
"url": "https://bugzilla.suse.com/1226277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:lib389-2.2.10~git2.345056d3-150500.3.21.1.x86_64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.aarch64",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.ppc64le",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.s390x",
"openSUSE Leap 15.5:libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-02T14:44:56Z",
"details": "moderate"
}
],
"title": "CVE-2024-5953"
}
]
}
SUSE-SU-2024:3218-1
Vulnerability from csaf_suse - Published: 2024-09-12 11:16 - Updated: 2024-09-12 11:16Summary
Security update for 389-ds
Notes
Title of the patch
Security update for 389-ds
Description of the patch
This update for 389-ds fixes the following issues:
- Update to version 2.0.20
- CVE-2024-3657: DOS via via specially crafted kerberos AS-REQ request. (bsc#1225512)
- CVE-2024-5953: Malformed userPassword hashes may cause a denial of service. (bsc#1226277)
- CVE-2024-2199: Malformed userPassword may cause crash at do_modify in slapd/modify.c. (bsc#1225507)
- CVE-2024-1062: Fixed a heap overflow leading to denail-of-servce while writing a value larger than 256 chars in log_entry_attr. (bsc#1219836)
Patchnames
SUSE-2024-3218,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3218,SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3218,SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3218,SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3218,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-3218,SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3218
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for 389-ds",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for 389-ds fixes the following issues:\n\n- Update to version 2.0.20\n- CVE-2024-3657: DOS via via specially crafted kerberos AS-REQ request. (bsc#1225512)\n- CVE-2024-5953: Malformed userPassword hashes may cause a denial of service. (bsc#1226277)\n- CVE-2024-2199: Malformed userPassword may cause crash at do_modify in slapd/modify.c. (bsc#1225507)\n- CVE-2024-1062: Fixed a heap overflow leading to denail-of-servce while writing a value larger than 256 chars in log_entry_attr. (bsc#1219836)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-3218,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3218,SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3218,SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3218,SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3218,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-3218,SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3218",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_3218-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:3218-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20243218-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:3218-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-September/019422.html"
},
{
"category": "self",
"summary": "SUSE Bug 1219836",
"url": "https://bugzilla.suse.com/1219836"
},
{
"category": "self",
"summary": "SUSE Bug 1225507",
"url": "https://bugzilla.suse.com/1225507"
},
{
"category": "self",
"summary": "SUSE Bug 1225512",
"url": "https://bugzilla.suse.com/1225512"
},
{
"category": "self",
"summary": "SUSE Bug 1226277",
"url": "https://bugzilla.suse.com/1226277"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-1062 page",
"url": "https://www.suse.com/security/cve/CVE-2024-1062/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-2199 page",
"url": "https://www.suse.com/security/cve/CVE-2024-2199/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-3657 page",
"url": "https://www.suse.com/security/cve/CVE-2024-3657/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-5953 page",
"url": "https://www.suse.com/security/cve/CVE-2024-5953/"
}
],
"title": "Security update for 389-ds",
"tracking": {
"current_release_date": "2024-09-12T11:16:05Z",
"generator": {
"date": "2024-09-12T11:16:05Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:3218-1",
"initial_release_date": "2024-09-12T11:16:05Z",
"revision_history": [
{
"date": "2024-09-12T11:16:05Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"product": {
"name": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"product_id": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64"
}
},
{
"category": "product_version",
"name": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"product": {
"name": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"product_id": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"product": {
"name": "389-ds-snmp-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"product_id": "389-ds-snmp-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64"
}
},
{
"category": "product_version",
"name": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"product": {
"name": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"product_id": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64"
}
},
{
"category": "product_version",
"name": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"product": {
"name": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"product_id": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"product": {
"name": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"product_id": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le"
}
},
{
"category": "product_version",
"name": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"product": {
"name": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"product_id": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"product": {
"name": "389-ds-snmp-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"product_id": "389-ds-snmp-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le"
}
},
{
"category": "product_version",
"name": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"product": {
"name": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"product_id": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le"
}
},
{
"category": "product_version",
"name": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"product": {
"name": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"product_id": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"product": {
"name": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"product_id": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x"
}
},
{
"category": "product_version",
"name": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"product": {
"name": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"product_id": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"product": {
"name": "389-ds-snmp-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"product_id": "389-ds-snmp-2.0.20~git9.5e2d637c-150400.3.42.3.s390x"
}
},
{
"category": "product_version",
"name": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"product": {
"name": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"product_id": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x"
}
},
{
"category": "product_version",
"name": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"product": {
"name": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"product_id": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"product": {
"name": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"product_id": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
}
},
{
"category": "product_version",
"name": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"product": {
"name": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"product_id": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"product": {
"name": "389-ds-snmp-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"product_id": "389-ds-snmp-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
}
},
{
"category": "product_version",
"name": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"product": {
"name": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"product_id": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
}
},
{
"category": "product_version",
"name": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"product": {
"name": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"product_id": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager Proxy 4.3",
"product": {
"name": "SUSE Manager Proxy 4.3",
"product_id": "SUSE Manager Proxy 4.3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-manager-proxy:4.3"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager Server 4.3",
"product": {
"name": "SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-manager-server:4.3"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64"
},
"product_reference": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
},
"product_reference": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64"
},
"product_reference": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
},
"product_reference": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64"
},
"product_reference": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
},
"product_reference": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64"
},
"product_reference": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
},
"product_reference": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64"
},
"product_reference": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
},
"product_reference": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64"
},
"product_reference": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
},
"product_reference": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64"
},
"product_reference": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
},
"product_reference": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64"
},
"product_reference": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
},
"product_reference": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64"
},
"product_reference": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le"
},
"product_reference": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x"
},
"product_reference": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
},
"product_reference": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64"
},
"product_reference": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le"
},
"product_reference": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x"
},
"product_reference": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
},
"product_reference": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64"
},
"product_reference": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le"
},
"product_reference": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x"
},
"product_reference": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
},
"product_reference": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64"
},
"product_reference": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le"
},
"product_reference": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x"
},
"product_reference": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
},
"product_reference": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le"
},
"product_reference": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
},
"product_reference": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le"
},
"product_reference": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
},
"product_reference": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le"
},
"product_reference": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
},
"product_reference": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le"
},
"product_reference": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
},
"product_reference": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64 as component of SUSE Manager Proxy 4.3",
"product_id": "SUSE Manager Proxy 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
},
"product_reference": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64 as component of SUSE Manager Proxy 4.3",
"product_id": "SUSE Manager Proxy 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
},
"product_reference": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64 as component of SUSE Manager Proxy 4.3",
"product_id": "SUSE Manager Proxy 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
},
"product_reference": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64 as component of SUSE Manager Proxy 4.3",
"product_id": "SUSE Manager Proxy 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
},
"product_reference": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le"
},
"product_reference": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x"
},
"product_reference": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64 as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
},
"product_reference": "389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le"
},
"product_reference": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x"
},
"product_reference": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64 as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
},
"product_reference": "389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le"
},
"product_reference": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x"
},
"product_reference": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64 as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
},
"product_reference": "lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le"
},
"product_reference": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x"
},
"product_reference": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64 as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
},
"product_reference": "libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"relates_to_product_reference": "SUSE Manager Server 4.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-1062",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-1062"
}
],
"notes": [
{
"category": "general",
"text": "A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-1062",
"url": "https://www.suse.com/security/cve/CVE-2024-1062"
},
{
"category": "external",
"summary": "SUSE Bug 1219836 for CVE-2024-1062",
"url": "https://bugzilla.suse.com/1219836"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-12T11:16:05Z",
"details": "moderate"
}
],
"title": "CVE-2024-1062"
},
{
"cve": "CVE-2024-2199",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-2199"
}
],
"notes": [
{
"category": "general",
"text": "A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-2199",
"url": "https://www.suse.com/security/cve/CVE-2024-2199"
},
{
"category": "external",
"summary": "SUSE Bug 1225507 for CVE-2024-2199",
"url": "https://bugzilla.suse.com/1225507"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-12T11:16:05Z",
"details": "moderate"
}
],
"title": "CVE-2024-2199"
},
{
"cve": "CVE-2024-3657",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-3657"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-3657",
"url": "https://www.suse.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "SUSE Bug 1225512 for CVE-2024-3657",
"url": "https://bugzilla.suse.com/1225512"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-12T11:16:05Z",
"details": "important"
}
],
"title": "CVE-2024-3657"
},
{
"cve": "CVE-2024-5953",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-5953"
}
],
"notes": [
{
"category": "general",
"text": "A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-5953",
"url": "https://www.suse.com/security/cve/CVE-2024-5953"
},
{
"category": "external",
"summary": "SUSE Bug 1226277 for CVE-2024-5953",
"url": "https://bugzilla.suse.com/1226277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Proxy 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:389-ds-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:389-ds-devel-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:lib389-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.ppc64le",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.s390x",
"SUSE Manager Server 4.3:libsvrcore0-2.0.20~git9.5e2d637c-150400.3.42.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-12T11:16:05Z",
"details": "moderate"
}
],
"title": "CVE-2024-5953"
}
]
}
SUSE-SU-2024:3257-1
Vulnerability from csaf_suse - Published: 2024-09-16 12:39 - Updated: 2024-09-16 12:39Summary
Security update for 389-ds
Notes
Title of the patch
Security update for 389-ds
Description of the patch
This update for 389-ds fixes the following issues:
- Update to version 1.4.4.20~git3.e7ac6d87:
- CVE-2024-3657: DOS via via specially crafted kerberos AS-REQ request. (bsc#1225512)
- CVE-2024-5953: Malformed userPassword hashes may cause a denial of service. (bsc#1226277)
- CVE-2024-2199: Malformed userPassword may cause crash at do_modify in slapd/modify.c. (bsc#1225507)
Patchnames
SUSE-2024-3257,SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-3257,SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3257,SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3257,SUSE-Storage-7.1-2024-3257
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for 389-ds",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for 389-ds fixes the following issues:\n\n- Update to version 1.4.4.20~git3.e7ac6d87:\n- CVE-2024-3657: DOS via via specially crafted kerberos AS-REQ request. (bsc#1225512)\n- CVE-2024-5953: Malformed userPassword hashes may cause a denial of service. (bsc#1226277)\n- CVE-2024-2199: Malformed userPassword may cause crash at do_modify in slapd/modify.c. (bsc#1225507)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-3257,SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-3257,SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3257,SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3257,SUSE-Storage-7.1-2024-3257",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_3257-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:3257-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20243257-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:3257-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-September/019439.html"
},
{
"category": "self",
"summary": "SUSE Bug 1225507",
"url": "https://bugzilla.suse.com/1225507"
},
{
"category": "self",
"summary": "SUSE Bug 1225512",
"url": "https://bugzilla.suse.com/1225512"
},
{
"category": "self",
"summary": "SUSE Bug 1226277",
"url": "https://bugzilla.suse.com/1226277"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-2199 page",
"url": "https://www.suse.com/security/cve/CVE-2024-2199/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-3657 page",
"url": "https://www.suse.com/security/cve/CVE-2024-3657/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-5953 page",
"url": "https://www.suse.com/security/cve/CVE-2024-5953/"
}
],
"title": "Security update for 389-ds",
"tracking": {
"current_release_date": "2024-09-16T12:39:40Z",
"generator": {
"date": "2024-09-16T12:39:40Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:3257-1",
"initial_release_date": "2024-09-16T12:39:40Z",
"revision_history": [
{
"date": "2024-09-16T12:39:40Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"product": {
"name": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"product_id": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64"
}
},
{
"category": "product_version",
"name": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"product": {
"name": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"product_id": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"product": {
"name": "389-ds-snmp-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"product_id": "389-ds-snmp-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64"
}
},
{
"category": "product_version",
"name": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"product": {
"name": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"product_id": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64"
}
},
{
"category": "product_version",
"name": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"product": {
"name": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"product_id": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"product": {
"name": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"product_id": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le"
}
},
{
"category": "product_version",
"name": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"product": {
"name": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"product_id": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"product": {
"name": "389-ds-snmp-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"product_id": "389-ds-snmp-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le"
}
},
{
"category": "product_version",
"name": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"product": {
"name": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"product_id": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"product": {
"name": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"product_id": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"product": {
"name": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"product_id": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x"
}
},
{
"category": "product_version",
"name": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"product": {
"name": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"product_id": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"product": {
"name": "389-ds-snmp-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"product_id": "389-ds-snmp-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x"
}
},
{
"category": "product_version",
"name": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"product": {
"name": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"product_id": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x"
}
},
{
"category": "product_version",
"name": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"product": {
"name": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"product_id": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"product": {
"name": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"product_id": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
}
},
{
"category": "product_version",
"name": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"product": {
"name": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"product_id": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"product": {
"name": "389-ds-snmp-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"product_id": "389-ds-snmp-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
}
},
{
"category": "product_version",
"name": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"product": {
"name": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"product_id": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
}
},
{
"category": "product_version",
"name": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"product": {
"name": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"product_id": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 7.1",
"product": {
"name": "SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:7.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64"
},
"product_reference": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
},
"product_reference": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64"
},
"product_reference": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
},
"product_reference": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64"
},
"product_reference": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
},
"product_reference": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64"
},
"product_reference": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
},
"product_reference": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64"
},
"product_reference": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le"
},
"product_reference": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x"
},
"product_reference": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
},
"product_reference": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64"
},
"product_reference": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le"
},
"product_reference": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x"
},
"product_reference": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
},
"product_reference": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64"
},
"product_reference": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le"
},
"product_reference": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x"
},
"product_reference": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
},
"product_reference": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64"
},
"product_reference": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le"
},
"product_reference": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x"
},
"product_reference": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
},
"product_reference": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le"
},
"product_reference": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
},
"product_reference": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le"
},
"product_reference": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
},
"product_reference": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le"
},
"product_reference": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
},
"product_reference": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le"
},
"product_reference": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
},
"product_reference": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64"
},
"product_reference": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
},
"product_reference": "389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64"
},
"product_reference": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
},
"product_reference": "389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64"
},
"product_reference": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
},
"product_reference": "lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64"
},
"product_reference": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
},
"product_reference": "libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-2199",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-2199"
}
],
"notes": [
{
"category": "general",
"text": "A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-2199",
"url": "https://www.suse.com/security/cve/CVE-2024-2199"
},
{
"category": "external",
"summary": "SUSE Bug 1225507 for CVE-2024-2199",
"url": "https://bugzilla.suse.com/1225507"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-16T12:39:40Z",
"details": "moderate"
}
],
"title": "CVE-2024-2199"
},
{
"cve": "CVE-2024-3657",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-3657"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-3657",
"url": "https://www.suse.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "SUSE Bug 1225512 for CVE-2024-3657",
"url": "https://bugzilla.suse.com/1225512"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-16T12:39:40Z",
"details": "important"
}
],
"title": "CVE-2024-3657"
},
{
"cve": "CVE-2024-5953",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-5953"
}
],
"notes": [
{
"category": "general",
"text": "A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-5953",
"url": "https://www.suse.com/security/cve/CVE-2024-5953"
},
{
"category": "external",
"summary": "SUSE Bug 1226277 for CVE-2024-5953",
"url": "https://bugzilla.suse.com/1226277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Enterprise Storage 7.1:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Enterprise Storage 7.1:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:389-ds-devel-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:lib389-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libsvrcore0-1.4.4.20~git3.e7ac6d87-150300.3.35.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-16T12:39:40Z",
"details": "moderate"
}
],
"title": "CVE-2024-5953"
}
]
}
SUSE-SU-2024:2910-1
Vulnerability from csaf_suse - Published: 2024-08-14 14:17 - Updated: 2024-08-14 14:17Summary
Security update for 389-ds
Notes
Title of the patch
Security update for 389-ds
Description of the patch
This update for 389-ds fixes the following issues:
Security issues fixed:
- CVE-2024-3657: Fixed potential denial of service via specially crafted kerberos AS-REQ request (bsc#1225512)
- CVE-2024-5953: Fixed a denial of service caused by malformed userPassword hashes (bsc#1226277)
- CVE-2024-2199: Fixed a crash caused by malformed userPassword in do_modify() (bsc#1225507)
Non-security issues fixed:
- crash when user does change password using iso-8859-1 encoding (bsc#1228912)
- Update to version 2.2.10:
Issue 2324 - Add a CI test (#6289)
Issue 6284 - BUG - freelist ordering causes high wtime
Issue 5327 - Fix test metadata
Issue 5853 - Update Cargo.lock
Issue 5962 - Rearrange includes for 32-bit support logic
Issue 5973 - Fix fedora cop RawHide builds (#5974)
Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console
Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255)
Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225)
Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208)
Issue 6170 - audit log buffering doesn't handle large updates
Issue 6193 - Test failure: test_tls_command_returns_error_text
Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: '/var/cache/dnf/metadata_lock.pid'`
Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173)
Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093)
Issue 6080 - ns-slapd crash in referint_get_config (#6081)
Issue 6117 - Fix the UTC offset print (#6118)
Issue 5305 - OpenLDAP version autodetection doesn't work
Issue 6112 - RFE - add new operation note for MFA authentications
Issue 5842 - Add log buffering to audit log
Issue 6103 - New connection timeout error breaks errormap (#6104)
Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079)
Issue 6096 - Improve connection timeout error logging (#6097)
Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088)
Issue 5487 - Fix various isses with logconv.pl (#6085)
Issue 6052 - Paged results test sets hostname to `localhost` on test collection
Issue 6061 - Certificate lifetime displayed as NaN
Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
Issue 3555 - Remove audit-ci from dependencies (#6056)
Issue 5647 - Fix unused variable warning from previous commit (#5670)
issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
Issue 6047 - Add a check for tagged commits
Issue 6041 - dscreate ds-root - accepts relative path (#6042)
Issue 6034 - Change replica_id from str to int
Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
Issue 5954 - Disable Transparent Huge Pages
Patchnames
SUSE-2024-2910,SUSE-SLE-Module-Server-Applications-15-SP6-2024-2910,openSUSE-SLE-15.6-2024-2910
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for 389-ds",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for 389-ds fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2024-3657: Fixed potential denial of service via specially crafted kerberos AS-REQ request (bsc#1225512)\n- CVE-2024-5953: Fixed a denial of service caused by malformed userPassword hashes (bsc#1226277)\n- CVE-2024-2199: Fixed a crash caused by malformed userPassword in do_modify() (bsc#1225507)\n \nNon-security issues fixed:\n\n- crash when user does change password using iso-8859-1 encoding (bsc#1228912)\n\n- Update to version 2.2.10:\n\n Issue 2324 - Add a CI test (#6289)\n Issue 6284 - BUG - freelist ordering causes high wtime\n Issue 5327 - Fix test metadata\n Issue 5853 - Update Cargo.lock\n Issue 5962 - Rearrange includes for 32-bit support logic\n Issue 5973 - Fix fedora cop RawHide builds (#5974)\n Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console\n Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255)\n Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225)\n Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208)\n Issue 6170 - audit log buffering doesn\u0027t handle large updates\n Issue 6193 - Test failure: test_tls_command_returns_error_text\n Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: \u0027/var/cache/dnf/metadata_lock.pid\u0027`\n Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173)\n Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093)\n Issue 6080 - ns-slapd crash in referint_get_config (#6081)\n Issue 6117 - Fix the UTC offset print (#6118)\n Issue 5305 - OpenLDAP version autodetection doesn\u0027t work\n Issue 6112 - RFE - add new operation note for MFA authentications\n Issue 5842 - Add log buffering to audit log\n Issue 6103 - New connection timeout error breaks errormap (#6104)\n Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079)\n Issue 6096 - Improve connection timeout error logging (#6097)\n Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088)\n Issue 5487 - Fix various isses with logconv.pl (#6085)\n Issue 6052 - Paged results test sets hostname to `localhost` on test collection\n Issue 6061 - Certificate lifetime displayed as NaN\n Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)\n Issue 3555 - Remove audit-ci from dependencies (#6056)\n Issue 5647 - Fix unused variable warning from previous commit (#5670)\n issue 5647 - covscan: memory leak in audit log when adding entries (#5650)\n Issue 6047 - Add a check for tagged commits\n Issue 6041 - dscreate ds-root - accepts relative path (#6042)\n Issue 6034 - Change replica_id from str to int\n Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)\n Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)\n Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)\n Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)\n Issue 5954 - Disable Transparent Huge Pages\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-2910,SUSE-SLE-Module-Server-Applications-15-SP6-2024-2910,openSUSE-SLE-15.6-2024-2910",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_2910-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:2910-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20242910-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:2910-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-August/019198.html"
},
{
"category": "self",
"summary": "SUSE Bug 1225507",
"url": "https://bugzilla.suse.com/1225507"
},
{
"category": "self",
"summary": "SUSE Bug 1225512",
"url": "https://bugzilla.suse.com/1225512"
},
{
"category": "self",
"summary": "SUSE Bug 1226277",
"url": "https://bugzilla.suse.com/1226277"
},
{
"category": "self",
"summary": "SUSE Bug 1228912",
"url": "https://bugzilla.suse.com/1228912"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-2199 page",
"url": "https://www.suse.com/security/cve/CVE-2024-2199/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-3657 page",
"url": "https://www.suse.com/security/cve/CVE-2024-3657/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-5953 page",
"url": "https://www.suse.com/security/cve/CVE-2024-5953/"
}
],
"title": "Security update for 389-ds",
"tracking": {
"current_release_date": "2024-08-14T14:17:45Z",
"generator": {
"date": "2024-08-14T14:17:45Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:2910-1",
"initial_release_date": "2024-08-14T14:17:45Z",
"revision_history": [
{
"date": "2024-08-14T14:17:45Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"product": {
"name": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"product_id": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64"
}
},
{
"category": "product_version",
"name": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"product": {
"name": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"product_id": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"product": {
"name": "389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"product_id": "389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.aarch64"
}
},
{
"category": "product_version",
"name": "lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"product": {
"name": "lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"product_id": "lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64"
}
},
{
"category": "product_version",
"name": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"product": {
"name": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"product_id": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"product": {
"name": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"product_id": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le"
}
},
{
"category": "product_version",
"name": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"product": {
"name": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"product_id": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"product": {
"name": "389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"product_id": "389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.ppc64le"
}
},
{
"category": "product_version",
"name": "lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"product": {
"name": "lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"product_id": "lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le"
}
},
{
"category": "product_version",
"name": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"product": {
"name": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"product_id": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"product": {
"name": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"product_id": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x"
}
},
{
"category": "product_version",
"name": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"product": {
"name": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"product_id": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"product": {
"name": "389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"product_id": "389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.s390x"
}
},
{
"category": "product_version",
"name": "lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"product": {
"name": "lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"product_id": "lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x"
}
},
{
"category": "product_version",
"name": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"product": {
"name": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"product_id": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"product": {
"name": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"product_id": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64"
}
},
{
"category": "product_version",
"name": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"product": {
"name": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"product_id": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"product": {
"name": "389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"product_id": "389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.x86_64"
}
},
{
"category": "product_version",
"name": "lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"product": {
"name": "lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"product_id": "lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64"
}
},
{
"category": "product_version",
"name": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"product": {
"name": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"product_id": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-server-applications:15:sp6"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.6",
"product": {
"name": "openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.6"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64"
},
"product_reference": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le"
},
"product_reference": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x"
},
"product_reference": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64"
},
"product_reference": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64"
},
"product_reference": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le"
},
"product_reference": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x"
},
"product_reference": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64"
},
"product_reference": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64"
},
"product_reference": "lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le"
},
"product_reference": "lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x"
},
"product_reference": "lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64"
},
"product_reference": "lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64"
},
"product_reference": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le"
},
"product_reference": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x"
},
"product_reference": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64"
},
"product_reference": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64"
},
"product_reference": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le"
},
"product_reference": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x"
},
"product_reference": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64"
},
"product_reference": "389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64"
},
"product_reference": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le"
},
"product_reference": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x"
},
"product_reference": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64"
},
"product_reference": "389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.aarch64"
},
"product_reference": "389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.ppc64le"
},
"product_reference": "389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.s390x"
},
"product_reference": "389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.x86_64"
},
"product_reference": "389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64"
},
"product_reference": "lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le"
},
"product_reference": "lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x"
},
"product_reference": "lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64"
},
"product_reference": "lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64"
},
"product_reference": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le"
},
"product_reference": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x"
},
"product_reference": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64"
},
"product_reference": "libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-2199",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-2199"
}
],
"notes": [
{
"category": "general",
"text": "A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-2199",
"url": "https://www.suse.com/security/cve/CVE-2024-2199"
},
{
"category": "external",
"summary": "SUSE Bug 1225507 for CVE-2024-2199",
"url": "https://bugzilla.suse.com/1225507"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T14:17:45Z",
"details": "moderate"
}
],
"title": "CVE-2024-2199"
},
{
"cve": "CVE-2024-3657",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-3657"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-3657",
"url": "https://www.suse.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "SUSE Bug 1225512 for CVE-2024-3657",
"url": "https://bugzilla.suse.com/1225512"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T14:17:45Z",
"details": "important"
}
],
"title": "CVE-2024-3657"
},
{
"cve": "CVE-2024-5953",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-5953"
}
],
"notes": [
{
"category": "general",
"text": "A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-5953",
"url": "https://www.suse.com/security/cve/CVE-2024-5953"
},
{
"category": "external",
"summary": "SUSE Bug 1226277 for CVE-2024-5953",
"url": "https://bugzilla.suse.com/1226277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-devel-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:389-ds-snmp-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:lib389-2.2.10~git2.345056d3-150600.8.7.2.x86_64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.aarch64",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.ppc64le",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.s390x",
"openSUSE Leap 15.6:libsvrcore0-2.2.10~git2.345056d3-150600.8.7.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-14T14:17:45Z",
"details": "moderate"
}
],
"title": "CVE-2024-5953"
}
]
}
WID-SEC-W-2024-1290
Vulnerability from csaf_certbund - Published: 2024-06-04 22:00 - Updated: 2025-03-25 23:00Summary
Red Hat Enterprise Linux: Mehrere Schwachstellen ermöglichen Denial of Service
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.
Red Hat Directory Server ist ein Open-Source LDAP-Server.
Angriff
Ein entfernter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux und Red Hat Directory Server ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen.
Betroffene Betriebssysteme
- Linux
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Red Hat Enterprise Linux (RHEL) ist eine popul\u00e4re Linux-Distribution.\r\nRed Hat Directory Server ist ein Open-Source LDAP-Server.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux und Red Hat Directory Server ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-1290 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1290.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-1290 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1290"
},
{
"category": "external",
"summary": "Red Hat Security Advisory vom 2024-06-04",
"url": "https://access.redhat.com/errata/RHSA-2024:3591"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-3591 vom 2024-06-05",
"url": "https://oss.oracle.com/pipermail/el-errata/2024-June/015799.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-3591 vom 2024-06-05",
"url": "https://oss.oracle.com/pipermail/el-errata/2024-June/015798.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:3837 vom 2024-06-11",
"url": "https://access.redhat.com/errata/RHSA-2024:3837"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-3837 vom 2024-06-12",
"url": "https://linux.oracle.com/errata/ELSA-2024-3837.html"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2024:3837 vom 2024-06-14",
"url": "https://errata.build.resf.org/RLSA-2024:3837"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:4092 vom 2024-06-25",
"url": "https://access.redhat.com/errata/RHSA-2024:4092"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:4210 vom 2024-07-02",
"url": "https://access.redhat.com/errata/RHSA-2024:4210"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:4209 vom 2024-07-02",
"url": "https://access.redhat.com/errata/RHSA-2024:4209"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:4235 vom 2024-07-03",
"url": "https://access.redhat.com/errata/RHSA-2024:4235"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-4235 vom 2024-07-03",
"url": "https://linux.oracle.com/errata/ELSA-2024-4235.html"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2024:4235 vom 2024-07-15",
"url": "https://errata.build.resf.org/RLSA-2024:4235"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:4633 vom 2024-07-18",
"url": "https://access.redhat.com/errata/RHSA-2024:4633"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2024-48C0A7FA73 vom 2024-07-30",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-48c0a7fa73"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2024-AC07913BE8 vom 2024-07-30",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-ac07913be8"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2024-C8290315DF vom 2024-07-30",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-c8290315df"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:5690 vom 2024-08-21",
"url": "https://access.redhat.com/errata/RHSA-2024:5690"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:6576 vom 2024-09-11",
"url": "https://access.redhat.com/errata/RHSA-2024:6576"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:7434 vom 2024-10-01",
"url": "https://access.redhat.com/errata/RHSA-2024:7434"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:7458 vom 2024-10-01",
"url": "https://access.redhat.com/errata/RHSA-2024:7458"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:1632 vom 2025-02-18",
"url": "https://access.redhat.com/errata/RHSA-2025:1632"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2025-2798 vom 2025-03-25",
"url": "https://alas.aws.amazon.com/AL2/ALAS-2025-2798.html"
}
],
"source_lang": "en-US",
"title": "Red Hat Enterprise Linux: Mehrere Schwachstellen erm\u00f6glichen Denial of Service",
"tracking": {
"current_release_date": "2025-03-25T23:00:00.000+00:00",
"generator": {
"date": "2025-03-26T09:09:12.963+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.12"
}
},
"id": "WID-SEC-W-2024-1290",
"initial_release_date": "2024-06-04T22:00:00.000+00:00",
"revision_history": [
{
"date": "2024-06-04T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2024-06-11T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-06-12T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2024-06-16T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen"
},
{
"date": "2024-06-25T22:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-07-01T22:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-07-02T22:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-07-03T22:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2024-07-15T22:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen"
},
{
"date": "2024-07-18T22:00:00.000+00:00",
"number": "10",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-07-30T22:00:00.000+00:00",
"number": "11",
"summary": "Neue Updates von Fedora aufgenommen"
},
{
"date": "2024-08-21T22:00:00.000+00:00",
"number": "12",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-09-10T22:00:00.000+00:00",
"number": "13",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-09-30T22:00:00.000+00:00",
"number": "14",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-10-01T22:00:00.000+00:00",
"number": "15",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2025-02-17T23:00:00.000+00:00",
"number": "16",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2025-03-25T23:00:00.000+00:00",
"number": "17",
"summary": "Neue Updates von Amazon aufgenommen"
}
],
"status": "final",
"version": "17"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Amazon Linux 2",
"product": {
"name": "Amazon Linux 2",
"product_id": "398363",
"product_identification_helper": {
"cpe": "cpe:/o:amazon:linux_2:-"
}
}
}
],
"category": "vendor",
"name": "Amazon"
},
{
"branches": [
{
"category": "product_name",
"name": "Fedora Linux",
"product": {
"name": "Fedora Linux",
"product_id": "74185",
"product_identification_helper": {
"cpe": "cpe:/o:fedoraproject:fedora:-"
}
}
}
],
"category": "vendor",
"name": "Fedora"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "RESF Rocky Linux",
"product": {
"name": "RESF Rocky Linux",
"product_id": "T032255",
"product_identification_helper": {
"cpe": "cpe:/o:resf:rocky_linux:-"
}
}
}
],
"category": "vendor",
"name": "RESF"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "12",
"product": {
"name": "Red Hat Directory Server 12",
"product_id": "T035188",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:directory_server:12"
}
}
},
{
"category": "product_version",
"name": "11",
"product": {
"name": "Red Hat Directory Server 11",
"product_id": "T035189",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:directory_server:11"
}
}
},
{
"category": "product_version",
"name": "7",
"product": {
"name": "Red Hat Enterprise Linux 7",
"product_id": "T035190",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:directory_server:7"
}
}
}
],
"category": "product_name",
"name": "Directory Server"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
},
{
"category": "product_version",
"name": "8",
"product": {
"name": "Red Hat Enterprise Linux 8",
"product_id": "T035191",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:8"
}
}
},
{
"category": "product_version",
"name": "9",
"product": {
"name": "Red Hat Enterprise Linux 9",
"product_id": "T035192",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:9"
}
}
}
],
"category": "product_name",
"name": "Enterprise Linux"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-2199",
"product_status": {
"known_affected": [
"T035191",
"67646",
"T035192",
"T035188",
"398363",
"T004914",
"T032255",
"74185",
"T035189"
]
},
"release_date": "2024-06-04T22:00:00.000+00:00",
"title": "CVE-2024-2199"
},
{
"cve": "CVE-2024-3657",
"product_status": {
"known_affected": [
"T035191",
"67646",
"T035192",
"T035188",
"398363",
"T004914",
"T032255",
"74185",
"T035189"
]
},
"release_date": "2024-06-04T22:00:00.000+00:00",
"title": "CVE-2024-3657"
}
]
}
OPENSUSE-SU-2024:14227-1
Vulnerability from csaf_opensuse - Published: 2024-07-31 00:00 - Updated: 2024-07-31 00:00Summary
389-ds-3.1.1~git0.aef1668-1.1 on GA media
Notes
Title of the patch
389-ds-3.1.1~git0.aef1668-1.1 on GA media
Description of the patch
These are all security issues fixed in the 389-ds-3.1.1~git0.aef1668-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-14227
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "389-ds-3.1.1~git0.aef1668-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the 389-ds-3.1.1~git0.aef1668-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-14227",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_14227-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-2199 page",
"url": "https://www.suse.com/security/cve/CVE-2024-2199/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-3657 page",
"url": "https://www.suse.com/security/cve/CVE-2024-3657/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-5953 page",
"url": "https://www.suse.com/security/cve/CVE-2024-5953/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-6237 page",
"url": "https://www.suse.com/security/cve/CVE-2024-6237/"
}
],
"title": "389-ds-3.1.1~git0.aef1668-1.1 on GA media",
"tracking": {
"current_release_date": "2024-07-31T00:00:00Z",
"generator": {
"date": "2024-07-31T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:14227-1",
"initial_release_date": "2024-07-31T00:00:00Z",
"revision_history": [
{
"date": "2024-07-31T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "389-ds-3.1.1~git0.aef1668-1.1.aarch64",
"product": {
"name": "389-ds-3.1.1~git0.aef1668-1.1.aarch64",
"product_id": "389-ds-3.1.1~git0.aef1668-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "389-ds-devel-3.1.1~git0.aef1668-1.1.aarch64",
"product": {
"name": "389-ds-devel-3.1.1~git0.aef1668-1.1.aarch64",
"product_id": "389-ds-devel-3.1.1~git0.aef1668-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-3.1.1~git0.aef1668-1.1.aarch64",
"product": {
"name": "389-ds-snmp-3.1.1~git0.aef1668-1.1.aarch64",
"product_id": "389-ds-snmp-3.1.1~git0.aef1668-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "lib389-3.1.1~git0.aef1668-1.1.aarch64",
"product": {
"name": "lib389-3.1.1~git0.aef1668-1.1.aarch64",
"product_id": "lib389-3.1.1~git0.aef1668-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libsvrcore0-3.1.1~git0.aef1668-1.1.aarch64",
"product": {
"name": "libsvrcore0-3.1.1~git0.aef1668-1.1.aarch64",
"product_id": "libsvrcore0-3.1.1~git0.aef1668-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-3.1.1~git0.aef1668-1.1.ppc64le",
"product": {
"name": "389-ds-3.1.1~git0.aef1668-1.1.ppc64le",
"product_id": "389-ds-3.1.1~git0.aef1668-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "389-ds-devel-3.1.1~git0.aef1668-1.1.ppc64le",
"product": {
"name": "389-ds-devel-3.1.1~git0.aef1668-1.1.ppc64le",
"product_id": "389-ds-devel-3.1.1~git0.aef1668-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-3.1.1~git0.aef1668-1.1.ppc64le",
"product": {
"name": "389-ds-snmp-3.1.1~git0.aef1668-1.1.ppc64le",
"product_id": "389-ds-snmp-3.1.1~git0.aef1668-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "lib389-3.1.1~git0.aef1668-1.1.ppc64le",
"product": {
"name": "lib389-3.1.1~git0.aef1668-1.1.ppc64le",
"product_id": "lib389-3.1.1~git0.aef1668-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libsvrcore0-3.1.1~git0.aef1668-1.1.ppc64le",
"product": {
"name": "libsvrcore0-3.1.1~git0.aef1668-1.1.ppc64le",
"product_id": "libsvrcore0-3.1.1~git0.aef1668-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-3.1.1~git0.aef1668-1.1.s390x",
"product": {
"name": "389-ds-3.1.1~git0.aef1668-1.1.s390x",
"product_id": "389-ds-3.1.1~git0.aef1668-1.1.s390x"
}
},
{
"category": "product_version",
"name": "389-ds-devel-3.1.1~git0.aef1668-1.1.s390x",
"product": {
"name": "389-ds-devel-3.1.1~git0.aef1668-1.1.s390x",
"product_id": "389-ds-devel-3.1.1~git0.aef1668-1.1.s390x"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-3.1.1~git0.aef1668-1.1.s390x",
"product": {
"name": "389-ds-snmp-3.1.1~git0.aef1668-1.1.s390x",
"product_id": "389-ds-snmp-3.1.1~git0.aef1668-1.1.s390x"
}
},
{
"category": "product_version",
"name": "lib389-3.1.1~git0.aef1668-1.1.s390x",
"product": {
"name": "lib389-3.1.1~git0.aef1668-1.1.s390x",
"product_id": "lib389-3.1.1~git0.aef1668-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libsvrcore0-3.1.1~git0.aef1668-1.1.s390x",
"product": {
"name": "libsvrcore0-3.1.1~git0.aef1668-1.1.s390x",
"product_id": "libsvrcore0-3.1.1~git0.aef1668-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-3.1.1~git0.aef1668-1.1.x86_64",
"product": {
"name": "389-ds-3.1.1~git0.aef1668-1.1.x86_64",
"product_id": "389-ds-3.1.1~git0.aef1668-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "389-ds-devel-3.1.1~git0.aef1668-1.1.x86_64",
"product": {
"name": "389-ds-devel-3.1.1~git0.aef1668-1.1.x86_64",
"product_id": "389-ds-devel-3.1.1~git0.aef1668-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "389-ds-snmp-3.1.1~git0.aef1668-1.1.x86_64",
"product": {
"name": "389-ds-snmp-3.1.1~git0.aef1668-1.1.x86_64",
"product_id": "389-ds-snmp-3.1.1~git0.aef1668-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "lib389-3.1.1~git0.aef1668-1.1.x86_64",
"product": {
"name": "lib389-3.1.1~git0.aef1668-1.1.x86_64",
"product_id": "lib389-3.1.1~git0.aef1668-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libsvrcore0-3.1.1~git0.aef1668-1.1.x86_64",
"product": {
"name": "libsvrcore0-3.1.1~git0.aef1668-1.1.x86_64",
"product_id": "libsvrcore0-3.1.1~git0.aef1668-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-3.1.1~git0.aef1668-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.aarch64"
},
"product_reference": "389-ds-3.1.1~git0.aef1668-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-3.1.1~git0.aef1668-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.ppc64le"
},
"product_reference": "389-ds-3.1.1~git0.aef1668-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-3.1.1~git0.aef1668-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.s390x"
},
"product_reference": "389-ds-3.1.1~git0.aef1668-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-3.1.1~git0.aef1668-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.x86_64"
},
"product_reference": "389-ds-3.1.1~git0.aef1668-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-3.1.1~git0.aef1668-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.aarch64"
},
"product_reference": "389-ds-devel-3.1.1~git0.aef1668-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-3.1.1~git0.aef1668-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.ppc64le"
},
"product_reference": "389-ds-devel-3.1.1~git0.aef1668-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-3.1.1~git0.aef1668-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.s390x"
},
"product_reference": "389-ds-devel-3.1.1~git0.aef1668-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-devel-3.1.1~git0.aef1668-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.x86_64"
},
"product_reference": "389-ds-devel-3.1.1~git0.aef1668-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-snmp-3.1.1~git0.aef1668-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.aarch64"
},
"product_reference": "389-ds-snmp-3.1.1~git0.aef1668-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-snmp-3.1.1~git0.aef1668-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.ppc64le"
},
"product_reference": "389-ds-snmp-3.1.1~git0.aef1668-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-snmp-3.1.1~git0.aef1668-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.s390x"
},
"product_reference": "389-ds-snmp-3.1.1~git0.aef1668-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-snmp-3.1.1~git0.aef1668-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.x86_64"
},
"product_reference": "389-ds-snmp-3.1.1~git0.aef1668-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-3.1.1~git0.aef1668-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.aarch64"
},
"product_reference": "lib389-3.1.1~git0.aef1668-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-3.1.1~git0.aef1668-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.ppc64le"
},
"product_reference": "lib389-3.1.1~git0.aef1668-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-3.1.1~git0.aef1668-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.s390x"
},
"product_reference": "lib389-3.1.1~git0.aef1668-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lib389-3.1.1~git0.aef1668-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.x86_64"
},
"product_reference": "lib389-3.1.1~git0.aef1668-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-3.1.1~git0.aef1668-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.aarch64"
},
"product_reference": "libsvrcore0-3.1.1~git0.aef1668-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-3.1.1~git0.aef1668-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.ppc64le"
},
"product_reference": "libsvrcore0-3.1.1~git0.aef1668-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-3.1.1~git0.aef1668-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.s390x"
},
"product_reference": "libsvrcore0-3.1.1~git0.aef1668-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsvrcore0-3.1.1~git0.aef1668-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.x86_64"
},
"product_reference": "libsvrcore0-3.1.1~git0.aef1668-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-2199",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-2199"
}
],
"notes": [
{
"category": "general",
"text": "A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-2199",
"url": "https://www.suse.com/security/cve/CVE-2024-2199"
},
{
"category": "external",
"summary": "SUSE Bug 1225507 for CVE-2024-2199",
"url": "https://bugzilla.suse.com/1225507"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-2199"
},
{
"cve": "CVE-2024-3657",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-3657"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-3657",
"url": "https://www.suse.com/security/cve/CVE-2024-3657"
},
{
"category": "external",
"summary": "SUSE Bug 1225512 for CVE-2024-3657",
"url": "https://bugzilla.suse.com/1225512"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-31T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-3657"
},
{
"cve": "CVE-2024-5953",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-5953"
}
],
"notes": [
{
"category": "general",
"text": "A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-5953",
"url": "https://www.suse.com/security/cve/CVE-2024-5953"
},
{
"category": "external",
"summary": "SUSE Bug 1226277 for CVE-2024-5953",
"url": "https://bugzilla.suse.com/1226277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-5953"
},
{
"cve": "CVE-2024-6237",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-6237"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-6237",
"url": "https://www.suse.com/security/cve/CVE-2024-6237"
},
{
"category": "external",
"summary": "SUSE Bug 1227610 for CVE-2024-6237",
"url": "https://bugzilla.suse.com/1227610"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-devel-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:389-ds-snmp-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:lib389-3.1.1~git0.aef1668-1.1.x86_64",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.aarch64",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.ppc64le",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.s390x",
"openSUSE Tumbleweed:libsvrcore0-3.1.1~git0.aef1668-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-6237"
}
]
}
FKIE_CVE-2024-3657
Vulnerability from fkie_nvd - Published: 2024-05-28 13:15 - Updated: 2025-11-03 21:16
Severity ?
Summary
A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service
References
| URL | Tags | ||
|---|---|---|---|
| secalert@redhat.com | https://access.redhat.com/errata/RHSA-2024:3591 | ||
| secalert@redhat.com | https://access.redhat.com/errata/RHSA-2024:3837 | ||
| secalert@redhat.com | https://access.redhat.com/errata/RHSA-2024:4092 | ||
| secalert@redhat.com | https://access.redhat.com/errata/RHSA-2024:4209 | ||
| secalert@redhat.com | https://access.redhat.com/errata/RHSA-2024:4210 | ||
| secalert@redhat.com | https://access.redhat.com/errata/RHSA-2024:4235 | ||
| secalert@redhat.com | https://access.redhat.com/errata/RHSA-2024:4633 | ||
| secalert@redhat.com | https://access.redhat.com/errata/RHSA-2024:5690 | ||
| secalert@redhat.com | https://access.redhat.com/errata/RHSA-2024:6576 | ||
| secalert@redhat.com | https://access.redhat.com/errata/RHSA-2024:7458 | ||
| secalert@redhat.com | https://access.redhat.com/errata/RHSA-2025:1632 | ||
| secalert@redhat.com | https://access.redhat.com/security/cve/CVE-2024-3657 | ||
| secalert@redhat.com | https://bugzilla.redhat.com/show_bug.cgi?id=2274401 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2024:3591 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2024:3837 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2024:4092 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2024:4209 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2024:4210 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2024:4235 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2024:4633 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/security/cve/CVE-2024-3657 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://bugzilla.redhat.com/show_bug.cgi?id=2274401 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.debian.org/debian-lts-announce/2025/01/msg00015.html |
Impacted products
| Vendor | Product | Version |
|---|
{
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service"
},
{
"lang": "es",
"value": "Se encontr\u00f3 una falla en 389-ds-base. Una consulta LDAP especialmente manipulada puede causar potencialmente una falla en el servidor de directorio, lo que lleva a una denegaci\u00f3n de servicio."
}
],
"id": "CVE-2024-3657",
"lastModified": "2025-11-03T21:16:16.273",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "secalert@redhat.com",
"type": "Secondary"
}
]
},
"published": "2024-05-28T13:15:11.057",
"references": [
{
"source": "secalert@redhat.com",
"url": "https://access.redhat.com/errata/RHSA-2024:3591"
},
{
"source": "secalert@redhat.com",
"url": "https://access.redhat.com/errata/RHSA-2024:3837"
},
{
"source": "secalert@redhat.com",
"url": "https://access.redhat.com/errata/RHSA-2024:4092"
},
{
"source": "secalert@redhat.com",
"url": "https://access.redhat.com/errata/RHSA-2024:4209"
},
{
"source": "secalert@redhat.com",
"url": "https://access.redhat.com/errata/RHSA-2024:4210"
},
{
"source": "secalert@redhat.com",
"url": "https://access.redhat.com/errata/RHSA-2024:4235"
},
{
"source": "secalert@redhat.com",
"url": "https://access.redhat.com/errata/RHSA-2024:4633"
},
{
"source": "secalert@redhat.com",
"url": "https://access.redhat.com/errata/RHSA-2024:5690"
},
{
"source": "secalert@redhat.com",
"url": "https://access.redhat.com/errata/RHSA-2024:6576"
},
{
"source": "secalert@redhat.com",
"url": "https://access.redhat.com/errata/RHSA-2024:7458"
},
{
"source": "secalert@redhat.com",
"url": "https://access.redhat.com/errata/RHSA-2025:1632"
},
{
"source": "secalert@redhat.com",
"url": "https://access.redhat.com/security/cve/CVE-2024-3657"
},
{
"source": "secalert@redhat.com",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://access.redhat.com/errata/RHSA-2024:3591"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://access.redhat.com/errata/RHSA-2024:3837"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://access.redhat.com/errata/RHSA-2024:4092"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://access.redhat.com/errata/RHSA-2024:4209"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://access.redhat.com/errata/RHSA-2024:4210"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://access.redhat.com/errata/RHSA-2024:4235"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://access.redhat.com/errata/RHSA-2024:4633"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://access.redhat.com/security/cve/CVE-2024-3657"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274401"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00015.html"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-20"
}
],
"source": "secalert@redhat.com",
"type": "Secondary"
}
]
}
GSD-2024-3657
Vulnerability from gsd - Updated: 2024-04-12 05:02Details
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
Aliases
{
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2024-3657"
],
"id": "GSD-2024-3657",
"modified": "2024-04-12T05:02:29.175242Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2024-3657",
"STATE": "RESERVED"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…