Record status Published
Identifier year (not publication year) 2024
Source publication May 28, 2024
Source updated Jun 26, 2026
Imported by cveboard Oct 24, 2026
CNA source text (English) 389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c
A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
389-ds-base
Vendor Unknown
Product Unknown
Platforms Unknown
Default status unaffected
Package 389-ds-base
Package collection https://github.com/389ds/389-ds-base
389-ds-base · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0 affectedsemver 3.1.1 Unavailable None listed
Red Hat Directory Server 11.5 E4S for RHEL 8
Vendor Red Hat
Product Red Hat Directory Server 11.5 E4S for RHEL 8
Platforms Unknown
Default status affected
Package redhat-ds:11
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Directory Server 11.5 E4S for RHEL 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
8060020250210084424.0ca98e7e unaffectedrpm * Unavailable None listed
Red Hat Directory Server 11.8 for RHEL 8
Vendor Red Hat
Product Red Hat Directory Server 11.8 for RHEL 8
Platforms Unknown
Default status affected
Package redhat-ds:11
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Directory Server 11.8 for RHEL 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
8090020240606122459.91529cd0 unaffectedrpm * Unavailable None listed
Red Hat Directory Server 11.9 for RHEL 8
Vendor Red Hat
Product Red Hat Directory Server 11.9 for RHEL 8
Platforms Unknown
Default status affected
Package redhat-ds:11
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Directory Server 11.9 for RHEL 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
8100020240604161237.37ed7c03 unaffectedrpm * Unavailable None listed
Red Hat Directory Server 12.4 for RHEL 9
Vendor Red Hat
Product Red Hat Directory Server 12.4 for RHEL 9
Platforms Unknown
Default status affected
Package redhat-ds:12
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Directory Server 12.4 for RHEL 9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
9040020240604143706.1674d574 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 7
Vendor Red Hat
Product Red Hat Enterprise Linux 7
Platforms Unknown
Default status affected
Package 389-ds-base
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.3.11.1-5.el7_9 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8
Vendor Red Hat
Product Red Hat Enterprise Linux 8
Platforms Unknown
Default status affected
Package 389-ds:1.4
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
8100020240613122040.25e700aa unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.8 Extended Update Support
Vendor Red Hat
Product Red Hat Enterprise Linux 8.8 Extended Update Support
Platforms Unknown
Default status affected
Package 389-ds:1.4
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.8 Extended Update Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
8080020240807050952.6dbb3803 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9
Vendor Red Hat
Product Red Hat Enterprise Linux 9
Platforms Unknown
Default status affected
Package 389-ds-base
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:2.4.5-8.el9_4 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9.2 Extended Update Support
Vendor Red Hat
Product Red Hat Enterprise Linux 9.2 Extended Update Support
Platforms Unknown
Default status affected
Package 389-ds-base
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9.2 Extended Update Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:2.2.4-9.el9_2 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 6
Vendor Red Hat
Product Red Hat Enterprise Linux 6
Platforms Unknown
Default status unknown
Package 389-ds-base
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.