{"id":"CVE-2024-1062","aliases":["ALSA-2024:3047","DEBIAN-CVE-2024-1062","EUVD-2024-16837","GHSA-6v6c-gc45-x65c","OESA-2024-1148","RHSA-2024:1074","RHSA-2024:1372","RHSA-2024:3047","RHSA-2024:4209","RHSA-2024:4633","RHSA-2024:5690","RHSA-2024:7458","RHSA-2025:1632","RLSA-2024:3047","SUSE-SU-2024:0908-1","SUSE-SU-2024:1906-1","SUSE-SU-2024:3218-1","UBUNTU-CVE-2024-1062"],"status":"published","title":"389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)","description":"A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00307,"percentile":0.23706,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122"],"published":"2024-02-08T11:06:35Z","modified":"2026-11-05T21:15:59Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"389-ds-base","fixed_in":["1.4.3.39-3.module_el8.10.0+3829+ea459e35"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"389-ds-base-devel","fixed_in":["1.4.3.39-3.module_el8.10.0+3829+ea459e35"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"389-ds-base-legacy-tools","fixed_in":["1.4.3.39-3.module_el8.10.0+3829+ea459e35"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"389-ds-base-libs","fixed_in":["1.4.3.39-3.module_el8.10.0+3829+ea459e35"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"389-ds-base-snmp","fixed_in":["1.4.3.39-3.module_el8.10.0+3829+ea459e35"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python3-lib389","fixed_in":["1.4.3.39-3.module_el8.10.0+3829+ea459e35"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"389-ds-base","fixed_in":["2.3.4+dfsg1-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"three-eight-nine-ds-base","fixed_in":["389-ds-base-1.4.3.36-4.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"three-eight-nine-ds-base","fixed_in":["389-ds-base-1.4.3.36-4.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"three-eight-nine-ds-base","fixed_in":["389-ds-base-1.4.3.36-5.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"three-eight-nine-ds-base","fixed_in":["389-ds-base-1.4.3.36-5.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"three-eight-nine-ds-base","fixed_in":["389-ds-base-1.4.3.36-5.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"three-eight-nine-ds-base","fixed_in":["389-ds-base-1.4.3.36-5.oe2203sp3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"389-ds-base","fixed_in":["0:1.4.3.34-6.module+el8.6.0+21315+7f417418"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"389-ds-base-debuginfo","fixed_in":["0:1.4.3.34-6.module+el8.6.0+21315+7f417418"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"389-ds-base-debugsource","fixed_in":["0:1.4.3.34-6.module+el8.6.0+21315+7f417418"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"389-ds-base-devel","fixed_in":["0:1.4.3.34-6.module+el8.6.0+21315+7f417418"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"389-ds-base-legacy-tools","fixed_in":["0:1.4.3.34-6.module+el8.6.0+21315+7f417418"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"389-ds-base-legacy-tools-debuginfo","fixed_in":["0:1.4.3.34-6.module+el8.6.0+21315+7f417418"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"389-ds-base-libs","fixed_in":["0:1.4.3.34-6.module+el8.6.0+21315+7f417418"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"389-ds-base-libs-debuginfo","fixed_in":["0:1.4.3.34-6.module+el8.6.0+21315+7f417418"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"389-ds-base-snmp","fixed_in":["0:1.4.3.34-6.module+el8.6.0+21315+7f417418"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"389-ds-base-snmp-debuginfo","fixed_in":["0:1.4.3.34-6.module+el8.6.0+21315+7f417418"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"python3-lib389","fixed_in":["0:1.4.3.34-6.module+el8.6.0+21315+7f417418"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.7::el8","package":"389-ds-base","fixed_in":["0:1.4.3.34-3.module+el8dsrv+21391+b62d2223"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.7::el8","package":"389-ds-base-debuginfo","fixed_in":["0:1.4.3.34-3.module+el8dsrv+21391+b62d2223"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.7::el8","package":"389-ds-base-debugsource","fixed_in":["0:1.4.3.34-3.module+el8dsrv+21391+b62d2223"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.7::el8","package":"389-ds-base-devel","fixed_in":["0:1.4.3.34-3.module+el8dsrv+21391+b62d2223"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.7::el8","package":"389-ds-base-legacy-tools","fixed_in":["0:1.4.3.34-3.module+el8dsrv+21391+b62d2223"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.7::el8","package":"389-ds-base-legacy-tools-debuginfo","fixed_in":["0:1.4.3.34-3.module+el8dsrv+21391+b62d2223"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.7::el8","package":"389-ds-base-libs","fixed_in":["0:1.4.3.34-3.module+el8dsrv+21391+b62d2223"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.7::el8","package":"389-ds-base-libs-debuginfo","fixed_in":["0:1.4.3.34-3.module+el8dsrv+21391+b62d2223"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.7::el8","package":"389-ds-base-snmp","fixed_in":["0:1.4.3.34-3.module+el8dsrv+21391+b62d2223"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.7::el8","package":"389-ds-base-snmp-debuginfo","fixed_in":["0:1.4.3.34-3.module+el8dsrv+21391+b62d2223"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.7::el8","package":"cockpit-389-ds","fixed_in":["0:1.4.3.34-3.module+el8dsrv+21391+b62d2223"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.7::el8","package":"python3-lib389","fixed_in":["0:1.4.3.34-3.module+el8dsrv+21391+b62d2223"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base","fixed_in":["0:1.4.3.39-3.module+el8.10.0+21535+f663b039"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-debuginfo","fixed_in":["0:1.4.3.39-3.module+el8.10.0+21535+f663b039"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-debugsource","fixed_in":["0:1.4.3.39-3.module+el8.10.0+21535+f663b039"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-devel","fixed_in":["0:1.4.3.39-3.module+el8.10.0+21535+f663b039"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-legacy-tools","fixed_in":["0:1.4.3.39-3.module+el8.10.0+21535+f663b039"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-legacy-tools-debuginfo","fixed_in":["0:1.4.3.39-3.module+el8.10.0+21535+f663b039"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-libs","fixed_in":["0:1.4.3.39-3.module+el8.10.0+21535+f663b039"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-libs-debuginfo","fixed_in":["0:1.4.3.39-3.module+el8.10.0+21535+f663b039"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-snmp","fixed_in":["0:1.4.3.39-3.module+el8.10.0+21535+f663b039"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-snmp-debuginfo","fixed_in":["0:1.4.3.39-3.module+el8.10.0+21535+f663b039"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-lib389","fixed_in":["0:1.4.3.39-3.module+el8.10.0+21535+f663b039"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"389-ds-base","fixed_in":["0:1.4.3.39-3.module+el8.10.0+1754+15117a6d"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"389-ds","fixed_in":["2.2.8~git65.347aae6-150500.3.17.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"389-ds","fixed_in":["2.2.8~git65.347aae6-150500.3.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"389-ds","fixed_in":["2.2.8~git65.347aae6-150600.8.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"389-ds","fixed_in":["2.2.8~git65.347aae6-150600.8.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.39-3.module_el8.10.0+3829+ea459e35"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.39-3.module_el8.10.0+3829+ea459e35"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.39-3.module_el8.10.0+3829+ea459e35"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.39-3.module_el8.10.0+3829+ea459e35"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.39-3.module_el8.10.0+3829+ea459e35"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.39-3.module_el8.10.0+3829+ea459e35"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.1+dfsg1-1","2.3.1+dfsg1-1+deb12u1","2.3.4+dfsg1-1","2.3.4+dfsg1-1.1","2.4.4+dfsg1-1","2.4.4+dfsg1-3","2.4.5+dfsg1-1","3.0.2+dfsg1-1","3.1.1+dfsg1-1","3.1.1+dfsg1-2","3.1.1+dfsg1-3","3.1.2+dfsg1-1","3.1.2+vendor1-1","3.1.2+vendor1-2","3.3.0-1","3.3.0-2","3.3.1-1","3.3.1-3"]},{"source":"osv","ecosystem":"Debian:13","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.4+dfsg1-1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"three-eight-nine-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"389-ds-base-1.4.3.36-4.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"three-eight-nine-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"389-ds-base-1.4.3.36-4.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"three-eight-nine-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"389-ds-base-1.4.3.36-5.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"three-eight-nine-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"389-ds-base-1.4.3.36-5.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"three-eight-nine-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"389-ds-base-1.4.3.36-5.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"three-eight-nine-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"389-ds-base-1.4.3.36-5.oe2203sp3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-6.module+el8.6.0+21315+7f417418"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-6.module+el8.6.0+21315+7f417418"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-6.module+el8.6.0+21315+7f417418"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-6.module+el8.6.0+21315+7f417418"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-6.module+el8.6.0+21315+7f417418"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-6.module+el8.6.0+21315+7f417418"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-6.module+el8.6.0+21315+7f417418"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-6.module+el8.6.0+21315+7f417418"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-6.module+el8.6.0+21315+7f417418"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-6.module+el8.6.0+21315+7f417418"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-6.module+el8.6.0+21315+7f417418"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.7::el8","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-3.module+el8dsrv+21391+b62d2223"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.7::el8","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-3.module+el8dsrv+21391+b62d2223"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.7::el8","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-3.module+el8dsrv+21391+b62d2223"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.7::el8","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-3.module+el8dsrv+21391+b62d2223"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.7::el8","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-3.module+el8dsrv+21391+b62d2223"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.7::el8","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-3.module+el8dsrv+21391+b62d2223"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.7::el8","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-3.module+el8dsrv+21391+b62d2223"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.7::el8","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-3.module+el8dsrv+21391+b62d2223"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.7::el8","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-3.module+el8dsrv+21391+b62d2223"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.7::el8","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-3.module+el8dsrv+21391+b62d2223"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.7::el8","package":"cockpit-389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-3.module+el8dsrv+21391+b62d2223"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.7::el8","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-3.module+el8dsrv+21391+b62d2223"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-3.module+el8.10.0+21535+f663b039"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-3.module+el8.10.0+21535+f663b039"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-3.module+el8.10.0+21535+f663b039"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-3.module+el8.10.0+21535+f663b039"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-3.module+el8.10.0+21535+f663b039"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-3.module+el8.10.0+21535+f663b039"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-3.module+el8.10.0+21535+f663b039"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-3.module+el8.10.0+21535+f663b039"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-3.module+el8.10.0+21535+f663b039"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-3.module+el8.10.0+21535+f663b039"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-3.module+el8.10.0+21535+f663b039"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.8::el8","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.37-10.module+el8dsrv+21971+f7435891"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server:11.8::el8","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.37-10.module+el8dsrv+21971+f7435891"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server:11.8::el8","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.37-10.module+el8dsrv+21971+f7435891"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server:11.8::el8","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.37-10.module+el8dsrv+21971+f7435891"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server:11.8::el8","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.37-10.module+el8dsrv+21971+f7435891"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server:11.8::el8","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.37-10.module+el8dsrv+21971+f7435891"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server:11.8::el8","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.37-10.module+el8dsrv+21971+f7435891"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server:11.8::el8","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.37-10.module+el8dsrv+21971+f7435891"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server:11.8::el8","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.37-10.module+el8dsrv+21971+f7435891"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server:11.8::el8","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.37-10.module+el8dsrv+21971+f7435891"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server:11.8::el8","package":"cockpit-389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.37-10.module+el8dsrv+21971+f7435891"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server:11.8::el8","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.37-10.module+el8dsrv+21971+f7435891"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.4-9.el9_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.4-9.el9_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.4-9.el9_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.4-9.el9_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.4-9.el9_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.4-9.el9_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.4-9.el9_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.35-5.module+el8.8.0+22193+5f98570a"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.35-5.module+el8.8.0+22193+5f98570a"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.35-5.module+el8.8.0+22193+5f98570a"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.35-5.module+el8.8.0+22193+5f98570a"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.35-5.module+el8.8.0+22193+5f98570a"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.35-5.module+el8.8.0+22193+5f98570a"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.35-5.module+el8.8.0+22193+5f98570a"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.35-5.module+el8.8.0+22193+5f98570a"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.35-5.module+el8.8.0+22193+5f98570a"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.35-5.module+el8.8.0+22193+5f98570a"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.35-5.module+el8.8.0+22193+5f98570a"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:directory_server_eus:12.2::el9","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-6.module+el9dsrv+22320+37c894f3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server_eus:12.2::el9","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-6.module+el9dsrv+22320+37c894f3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server_eus:12.2::el9","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-6.module+el9dsrv+22320+37c894f3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server_eus:12.2::el9","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-6.module+el9dsrv+22320+37c894f3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server_eus:12.2::el9","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-6.module+el9dsrv+22320+37c894f3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server_eus:12.2::el9","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-6.module+el9dsrv+22320+37c894f3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server_eus:12.2::el9","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-6.module+el9dsrv+22320+37c894f3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server_eus:12.2::el9","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-6.module+el9dsrv+22320+37c894f3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server_eus:12.2::el9","package":"cockpit-389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-6.module+el9dsrv+22320+37c894f3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server_eus:12.2::el9","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-6.module+el9dsrv+22320+37c894f3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server_e4s:11.5::el8","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:directory_server_e4s:11.5::el8","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:directory_server_e4s:11.5::el8","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:directory_server_e4s:11.5::el8","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:directory_server_e4s:11.5::el8","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:directory_server_e4s:11.5::el8","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:directory_server_e4s:11.5::el8","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:directory_server_e4s:11.5::el8","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:directory_server_e4s:11.5::el8","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:directory_server_e4s:11.5::el8","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:directory_server_e4s:11.5::el8","package":"cockpit-389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:directory_server_e4s:11.5::el8","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-3.module+el8.10.0+1754+15117a6d"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.8~git65.347aae6-150500.3.17.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.8~git65.347aae6-150500.3.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.8~git65.347aae6-150600.8.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.8~git65.347aae6-150600.8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.20~git9.5e2d637c-150400.3.42.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.20~git9.5e2d637c-150400.3.42.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.20~git9.5e2d637c-150400.3.42.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.20~git9.5e2d637c-150400.3.42.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.20~git9.5e2d637c-150400.3.42.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.20~git9.5e2d637c-150400.3.42.3"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.3.12-1build1","1.3.3.13-1","1.3.4.5-2","1.3.4.8-1","1.3.4.8-3","1.3.4.8-3ubuntu1","1.3.4.8-4","1.3.4.9-1","1.3.4.9-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.7.5-1","1.3.7.5-1build1","1.3.7.5-1build2","1.3.7.9-1","1.3.7.10-1","1.3.7.10-1ubuntu1","1.3.7.10-1ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.1.6-4","1.4.1.6-4build1","1.4.2.4-1","1.4.2.4-1build1","1.4.3.2-1","1.4.3.2-1build1","1.4.3.6-2","1.4.3.6-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.4.11-2build1","1.4.4.11-2build2","1.4.4.17-1","2.0.11-2","2.0.14-1","2.0.15-1","2.0.15-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.4+dfsg1-1","2.4.4+dfsg1-1ubuntu1","2.4.4+dfsg1-1ubuntu4","2.4.4+dfsg1-3","2.4.5+dfsg1-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.2+dfsg1-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.2+vendor1-2","3.1.2+vendor1-2build1","3.3.1-3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.2+dfsg1-1","3.1.2+vendor1-2"]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"red hat","product":"red hat directory server 11.5 e4s for rhel 8"},{"vendor":"red hat","product":"red hat directory server 11.7 for rhel 8"},{"vendor":"red hat","product":"red hat directory server 11.8 for rhel 8"},{"vendor":"red hat","product":"red hat directory server 12"},{"vendor":"red hat","product":"red hat directory server 12.2 eus for rhel 9"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 extended update support"},{"vendor":"redhat","product":"389_directory_server"},{"vendor":"redhat","product":"directory_server"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"enterprise_linux_eus"},{"vendor":"redhat","product":"enterprise_linux_for_arm_64_eus"},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems"},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems_eus"},{"vendor":"redhat","product":"enterprise_linux_for_power_little_endian_eus"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions"},{"vendor":"redhat","product":"enterprise_linux_server_tus"},{"vendor":"redhat","product":"enterprise_linux_update_services_for_sap_solutions"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:1074","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1372","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3047","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4209","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4633","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:5690","tags":["vendor-advisory","x_refsource_REDHAT","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:7458","tags":["vendor-advisory","x_refsource_REDHAT","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1632","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-1062","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Vendor Advisory","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256711","tags":["x_transferred","Issue Tracking","Vendor Advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2261879","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","Vendor Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1062","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-6v6c-gc45-x65c"},{"url":"https://bugzilla.redhat.com/2261879","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-3047.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/389ds/389-ds-base/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/1xxx/CVE-2024-1062.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-1062","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1148","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-15025","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-15030","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1074.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-1062","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2265536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2265537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2265538","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2265539","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2265540","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2265541","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2265542","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2265543","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2265544","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268138","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1372.json","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-14025","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-16338","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-19028","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-19240","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-5107","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-5135","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-5143","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3047.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2267976","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268183","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2274367","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2274401","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4209.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-2199","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-2199","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2199","tags":["advisory"]},{"url":"https://www.port389.org/docs/389ds/releases/release-3-1-1.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-3657","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-3657","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3657","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2292104","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4633.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-5953","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-5953","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5953","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5690.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7458.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1632.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:3047","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240908-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1219836","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1062","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241906-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243218-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1225507","tags":["report"]},{"url":"https://bugzilla.suse.com/1225512","tags":["report"]},{"url":"https://bugzilla.suse.com/1226277","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3657","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5953","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2024-1062","tags":["report"]},{"url":"https://github.com/389ds/389-ds-base/issues/5647","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2024-1062","title":"389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)","description":"A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.","status":"published","published":"2024-02-12T13:04:39.944Z","modified":"2026-11-05T11:40:04.6Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-05T13:18:22.408512Z"}],"euvd":[{"id":"EUVD-2024-16837","description":"A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.","status":"published","published":"2024-02-12T13:04:39Z","modified":"2026-11-05T11:40:04Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-05T13:14:14.11293Z"}],"ghsa":[{"id":"GHSA-6v6c-gc45-x65c","title":"A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when...","description":"A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.","status":"published","published":"2024-02-12T15:30:23Z","modified":"2025-02-18T12:32:20Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:59:58.181327Z"}],"nvd":[{"id":"CVE-2024-1062","description":"A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.","status":"published","published":"2024-02-12T13:15:09.21Z","modified":"2026-11-05T12:17:46.893Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-122"],"updated_at":"2026-11-05T16:36:40.983114Z"}],"osv":[{"id":"CVE-2024-1062","title":"389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)","description":"A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.","status":"published","published":"2024-02-12T13:04:39.944Z","modified":"2026-11-07T02:30:20.963795095Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-122"],"updated_at":"2026-11-07T03:07:52.191907Z"},{"id":"DEBIAN-CVE-2024-1062","description":"A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.","status":"published","published":"2024-02-12T13:15:09.21Z","modified":"2026-11-02T12:00:36.555198408Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:41.849198Z"},{"id":"OESA-2024-1148","title":"three-eight-nine-ds-base security update","description":"389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration.\r\n\r\nSecurity Fix(es):\r\n\r\nA heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.(CVE-2024-1062)","status":"published","published":"2024-02-08T11:06:35Z","modified":"2026-08-18T01:18:16.033918359Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"RHSA-2024:1074","title":"Red Hat Security Advisory: 389-ds:1.4 security update","status":"published","published":"2024-10-01T17:13:48Z","modified":"2026-04-21T10:02:53Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1372","title":"Red Hat Security Advisory: redhat-ds:11 security, bug fix, and enhancement update","status":"published","published":"2024-10-01T17:13:57Z","modified":"2026-02-26T10:11:49Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:3047","title":"Red Hat Security Advisory: 389-ds:1.4 security update","status":"published","published":"2024-10-01T17:14:06Z","modified":"2026-04-21T10:03:06Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:4209","title":"Red Hat Security Advisory: redhat-ds:11 security and bug fix update","status":"published","published":"2024-10-01T17:13:24Z","modified":"2026-09-09T10:03:31Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4633","title":"Red Hat Security Advisory: 389-ds-base security update","status":"published","published":"2024-10-01T17:14:16Z","modified":"2026-09-09T10:03:35Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:5690","title":"Red Hat Security Advisory: 389-ds:1.4 security update","status":"published","published":"2024-10-01T17:14:47Z","modified":"2026-09-09T10:03:35Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:7458","title":"Red Hat Security Advisory: redhat-ds:12 security update","status":"published","published":"2024-10-01T17:15:43Z","modified":"2026-09-09T10:03:36Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2025:1632","title":"Red Hat Security Advisory: redhat-ds:11 security update","status":"published","published":"2025-02-19T10:03:28Z","modified":"2026-09-09T10:05:08Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.096024Z"},{"id":"UBUNTU-CVE-2024-1062","description":"A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.","status":"published","published":"2024-02-12T13:15:00Z","modified":"2026-10-17T12:56:43.434344168Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:41.555387Z"},{"id":"ALSA-2024:3047","title":"Moderate: 389-ds:1.4 security update","description":"389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. \n\nSecurity Fix(es):\n\n* 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) (CVE-2024-1062)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-05-22T00:00:00Z","modified":"2026-10-29T11:02:20.948770763Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"RLSA-2024:3047","title":"Moderate: 389-ds:1.4 security update","description":"389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. \n\nSecurity Fix(es):\n\n* 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) (CVE-2024-1062)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.","status":"published","published":"2024-06-14T13:59:30.118978Z","modified":"2026-02-05T13:00:07.369147Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2024:0908-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\n- CVE-2024-1062: Fixed possible denial of service when audit logging is enabled (bsc#1219836).\n","status":"published","published":"2024-03-15T09:20:22Z","modified":"2026-02-04T03:23:13.700397Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:1906-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\n- Update to version 2.2.8~git65.347aae6:\n- CVE-2024-1062: Resolved possible denial of service when audit logging is enabled. (bsc#1219836)\n","status":"published","published":"2024-06-03T15:25:18Z","modified":"2025-05-02T04:36:12.264016Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:3218-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\n- Update to version 2.0.20\n- CVE-2024-3657: DOS via via specially crafted kerberos AS-REQ request. (bsc#1225512)\n- CVE-2024-5953: Malformed userPassword hashes may cause a denial of service. (bsc#1226277)\n- CVE-2024-2199: Malformed userPassword may cause crash at do_modify in slapd/modify.c. (bsc#1225507)\n- CVE-2024-1062: Fixed a heap overflow leading to denail-of-servce while writing a value larger than 256 chars in log_entry_attr. (bsc#1219836)\n","status":"published","published":"2024-09-12T11:16:05Z","modified":"2026-02-04T04:29:02.748762Z","updated_at":"2026-11-02T15:53:55.639015Z"}]}}
