CVE-2024-5953

MEDIUM

Red Hat Directory Server - Authenticated Denial of Service via Malformed Password Hash

Title source: llm

Description

A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.

References (13)

Core 13

Core References

Mailing List

https://lists.debian.org/debian-lts-announce/2025/01/msg00015.html

Vendor Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2024:4633

Vendor Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2024:4997

Vendor Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2024:5192

Vendor Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2024:5690

Vendor Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2024:6153

Vendor Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2024:6568

Vendor Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2024:6569

Vendor Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2024:6576

Issue Tracking issue-tracking x_refsource_redhat

https://bugzilla.redhat.com/show_bug.cgi?id=2292104

Vendor Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2024:7458

Vendor Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2025:1632

Vendor Advisory vdb-entry x_refsource_redhat

https://access.redhat.com/security/cve/CVE-2024-5953

Scores

CVSS v3 5.7

EPSS 0.0012

EPSS Percentile 30.2%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-1288

Status published

Products (12)

Red Hat/Red Hat Directory Server 11.5 E4S for RHEL 8 8060020250210084424.0ca98e7e

Red Hat/Red Hat Directory Server 11.7 for RHEL 8 8080020240909040333.f969626e

Red Hat/Red Hat Directory Server 11.9 for RHEL 8 8100020240902112955.37ed7c03

Red Hat/Red Hat Directory Server 12.2 EUS for RHEL 9 9020020240916150035.1674d574

Red Hat/Red Hat Directory Server 12.4 for RHEL 9 9040020240723122852.1674d574

Red Hat/Red Hat Enterprise Linux 10

Red Hat/Red Hat Enterprise Linux 6

Red Hat/Red Hat Enterprise Linux 7 Extended Lifecycle Support 0:1.3.11.1-6.el7_9

Red Hat/Red Hat Enterprise Linux 8 8100020240910065753.25e700aa

Red Hat/Red Hat Enterprise Linux 8.8 Extended Update Support 8080020240807050952.6dbb3803

... and 2 more

Published Jun 18, 2024

Tracked Since Feb 18, 2026