{"id":"CVE-2024-6237","aliases":["ALSA-2024:5192","DEBIAN-CVE-2024-6237","EUVD-2024-47979","GHSA-2fpj-qhmc-jpvc","OESA-2024-2166","RHSA-2024:4997","RHSA-2024:5192","RLSA-2024:5192","UBUNTU-CVE-2024-6237","openSUSE-SU-2024:14227-1"],"status":"published","title":"389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request","description":"A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00923,"percentile":0.60646,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-230"],"published":"2024-07-09T16:39:58Z","modified":"2026-11-02T12:03:11Z","fixes":[{"ecosystem":"Debian:13","package":"389-ds-base","fixed_in":["2.4.5+dfsg1-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-9.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-9.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-9.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-9.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.1+dfsg1-1","2.3.1+dfsg1-1+deb12u1","2.3.4+dfsg1-1","2.3.4+dfsg1-1.1","2.4.4+dfsg1-1","2.4.4+dfsg1-3","2.4.5+dfsg1-1","3.0.2+dfsg1-1","3.1.1+dfsg1-1","3.1.1+dfsg1-2","3.1.1+dfsg1-3","3.1.2+dfsg1-1","3.1.2+vendor1-1","3.1.2+vendor1-2","3.3.0-1","3.3.0-2","3.3.1-1","3.3.1-3"]},{"source":"osv","ecosystem":"Debian:13","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5+dfsg1-1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"three-eight-nine-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"389-ds-base-3.1.1-1.oe2403"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:12.4::el9","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-7.module+el9dsrv+22137+7a1133f7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:12.4::el9","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-7.module+el9dsrv+22137+7a1133f7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:12.4::el9","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-7.module+el9dsrv+22137+7a1133f7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:12.4::el9","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-7.module+el9dsrv+22137+7a1133f7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:12.4::el9","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-7.module+el9dsrv+22137+7a1133f7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:12.4::el9","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-7.module+el9dsrv+22137+7a1133f7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:12.4::el9","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-7.module+el9dsrv+22137+7a1133f7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:12.4::el9","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-7.module+el9dsrv+22137+7a1133f7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:12.4::el9","package":"cockpit-389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-7.module+el9dsrv+22137+7a1133f7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:12.4::el9","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-7.module+el9dsrv+22137+7a1133f7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-9.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-9.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-9.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-9.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-9.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-9.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-9.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-9.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-9.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-9.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-9.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-9.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-9.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.3.12-1build1","1.3.3.13-1","1.3.4.5-2","1.3.4.8-1","1.3.4.8-3","1.3.4.8-3ubuntu1","1.3.4.8-4","1.3.4.9-1","1.3.4.9-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.7.5-1","1.3.7.5-1build1","1.3.7.5-1build2","1.3.7.9-1","1.3.7.10-1","1.3.7.10-1ubuntu1","1.3.7.10-1ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.1.6-4","1.4.1.6-4build1","1.4.2.4-1","1.4.2.4-1build1","1.4.3.2-1","1.4.3.2-1build1","1.4.3.6-2","1.4.3.6-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.4.11-2build1","1.4.4.11-2build2","1.4.4.17-1","2.0.11-2","2.0.14-1","2.0.15-1","2.0.15-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.2+dfsg1-1","3.1.2+vendor1-2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1~git0.aef1668-1.1"}]}],"bundled":4}],"products":[{"vendor":"red hat","product":"red hat directory server 11"},{"vendor":"red hat","product":"red hat directory server 12.4 for rhel 9"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"redhat","product":"389_directory_server"},{"vendor":"redhat","product":"directory_server"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:4997","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:5192","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-6237","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Vendor Advisory","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2293579","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","report"]},{"url":"https://github.com/389ds/389-ds-base/issues/5989","tags":["x_transferred","Issue Tracking","report","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6237","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-2fpj-qhmc-jpvc"},{"url":"https://access.redhat.com/security/cve/CVE-2024-5953","tags":["report"]},{"url":"https://bugzilla.redhat.com/2292104","tags":["report"]},{"url":"https://bugzilla.redhat.com/2293579","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-5192.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/6xxx/CVE-2024-6237.json","tags":["advisory"]},{"url":"https://github.com/389ds/389-ds-base","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-6237","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2166","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5953","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2292104","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4997.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-5953","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-6237","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5192.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:5192","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-6237","tags":["report"]},{"url":"https://github.com/389ds/389-ds-base/commit/e8dd583685e6143f2027f97569de4cc45ba46e14","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3657","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6237","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-6237","title":"389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request","description":"A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.","status":"published","published":"2024-07-09T16:39:58.81Z","modified":"2026-11-06T20:34:50.259Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-230"],"updated_at":"2026-11-06T21:31:06.649526Z"}],"euvd":[{"id":"EUVD-2024-47979","description":"A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.","status":"published","published":"2024-07-09T16:39:58Z","modified":"2026-11-06T20:34:50Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-06T21:07:00.111123Z"}],"ghsa":[{"id":"GHSA-2fpj-qhmc-jpvc","title":"A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a...","description":"A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.","status":"published","published":"2024-07-09T18:30:53Z","modified":"2024-08-12T15:30:48Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-230"],"updated_at":"2026-11-02T14:57:55.154597Z"}],"nvd":[{"id":"CVE-2024-6237","description":"A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.","status":"published","published":"2024-07-09T17:15:48.96Z","modified":"2026-11-06T21:17:02.187Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-230"],"updated_at":"2026-11-07T00:02:29.674168Z"}],"osv":[{"id":"CVE-2024-6237","title":"389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request","description":"A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.","status":"published","published":"2024-07-09T16:39:58.81Z","modified":"2026-11-08T02:30:56.055643519Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-230"],"updated_at":"2026-11-07T11:15:41.683306Z"},{"id":"DEBIAN-CVE-2024-6237","description":"A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.","status":"published","published":"2024-07-09T17:15:48.96Z","modified":"2026-11-07T09:47:26.531283217Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-07T10:14:39.995311Z"},{"id":"OESA-2024-2166","title":"three-eight-nine-ds-base security update","description":"389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration.\r\n\r\nSecurity Fix(es):\r\n\r\nA denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.(CVE-2024-5953)\r\n\r\nA flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.(CVE-2024-6237)","status":"published","published":"2024-09-20T11:07:38Z","modified":"2026-08-18T01:17:32.9560261Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"RHSA-2024:4997","title":"Red Hat Security Advisory: redhat-ds:12 security and bug fix update","status":"published","published":"2024-10-01T17:14:25Z","modified":"2026-03-18T11:36:07.039503Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:5192","title":"Red Hat Security Advisory: 389-ds-base security update","status":"published","published":"2024-10-01T17:14:36Z","modified":"2026-06-26T12:22:23.023766424Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"UBUNTU-CVE-2024-6237","description":"A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.","status":"published","published":"2024-07-09T17:15:00Z","modified":"2026-05-20T16:20:14.086586335Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:55:18.664792Z"},{"id":"ALSA-2024:5192","title":"Moderate: 389-ds-base security update","description":"389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.\n\nSecurity Fix(es):\n\n* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)\n* 389-ds-base: unauthenticated user can trigger a DoS by sending a specific extended search request (CVE-2024-6237)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-08-12T00:00:00Z","modified":"2026-10-29T11:31:49.638329989Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"openSUSE-SU-2024:14227-1","title":"389-ds-3.1.1~git0.aef1668-1.1 on GA media","description":"These are all security issues fixed in the 389-ds-3.1.1~git0.aef1668-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-07-31T00:00:00Z","modified":"2026-02-04T02:55:51.029937Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"RLSA-2024:5192","title":"Moderate: 389-ds-base security update","description":"389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.\n\nSecurity Fix(es):\n\n* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)\n\n* 389-ds-base: unauthenticated user can trigger a DoS by sending a specific extended search request (CVE-2024-6237)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-08-21T14:53:26.06267Z","modified":"2026-02-05T10:15:03.70726Z","updated_at":"2026-11-02T15:53:24.923365Z"}]}}