A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service

redhat RHSA-2024:4235: RHSA-2024:4235: 389-ds security update (Important)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4210 advisory.

    Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the     Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages     for server administration.

    Security Fix(es):

    * ns-slapd crashing in ldap_mods_free() (CVE-2024-2199) (BZ#2267976)

    * Potential denial of service via specially crafted kerberos     AS-REQ request (CVE-2024-3657) (BZ#2274401)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4209 advisory.

    Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the     Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages     for server administration.

    Security Fix(s):
    * 389-ds-base: Potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)     (BZ#2274401)

    * 389-ds-base: Authenticated user can cause a server failure while modifying `userPassword` using     malformed input (CVE-2024-2199) (BZ#2267976)

    * 389-ds-base: Denial of service when writing a value larger than 256 chars in log_entry_attr     (CVE-2024-1062) (BZ#2261879)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug fix(es):

    * Directory Server now flushes the entry cache less frequently (BZ#2268177)

    * The `ns-slapd` binary is now linked with the thread-safe `libldap_r` library, no longer causing     segmentation fault (BZ#2264534)

    Users of Red Hat Directory Server 11 are advised to install these updated packages.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4092 advisory.

    Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the     Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages     for server administration.

    Security Fix(es):

    * 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)     (2267976)

    * 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)     (2274401)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * One level scoped search now returns a subsuffix correctly (BZ#2292903)

    * Improved performance of filter component evaluation when tested against a large value set, such as group     members (BZ#2293001)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:3837 advisory.

    * 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)

    * 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:3837 advisory.

    * 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)
    * 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3591 advisory.

  - A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an     authenticated user to cause a server crash while modifying `userPassword` using malformed input.
    (CVE-2024-2199)

  - A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the     directory server, leading to a denial of service (CVE-2024-3657)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-3837 advisory.

    [2.4.5-8]
    - Bump version to 2.4.5-8
    - Fix License tag

    [2.4.5-7]
    - Bump version to 2.4.5-7
    - Resolves: RHEL-34819 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at do_modify in     slapd/modify.c
    - Resolves: RHEL-34825 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted     kerberos AS-REQ requ

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3837 advisory.

    389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base     packages include the Lightweight Directory Access Protocol (LDAP) server and     command-line utilities for server administration.

    Security Fix(es):

    * 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)

    * 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References     section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-3591 advisory.

    [1.3.11.1-5]
    - Bump version to 1.3.11.1-5
    - Resolves: RHEL-33337 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted     kerberos AS-REQ request
    - Resolves: RHEL-34817 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at do_modify in     slapd/modify.c

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3591 advisory.

    389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the     Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

    Security Fix(es):

    * 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)

    * 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
201231	RHEL 8 : redhat-ds:11 (RHSA-2024:4210)	Nessus	Red Hat Local Security Checks	high
201230	RHEL 8 : redhat-ds:11 (RHSA-2024:4209)	Nessus	Red Hat Local Security Checks	high
200994	RHEL 9 : redhat-ds:12 (RHSA-2024:4092)	Nessus	Red Hat Local Security Checks	high
200592	Rocky Linux 9 : 389-ds-base (RLSA-2024:3837)	Nessus	Rocky Linux Local Security Checks	high
200550	AlmaLinux 9 : 389-ds-base (ALSA-2024:3837)	Nessus	Alma Linux Local Security Checks	high
200499	CentOS 7 : 389-ds-base (RHSA-2024:3591)	Nessus	CentOS Local Security Checks	high
200441	Oracle Linux 9 : 389-ds-base (ELSA-2024-3837)	Nessus	Oracle Linux Local Security Checks	high
200432	RHEL 9 : 389-ds-base (RHSA-2024:3837)	Nessus	Red Hat Local Security Checks	high
200101	Oracle Linux 7 : 389-ds-base (ELSA-2024-3591)	Nessus	Oracle Linux Local Security Checks	high
200097	RHEL 7 : 389-ds-base (RHSA-2024:3591)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2024-3657

high

Tenable Plugins

Coming Soon

high

high

high

high

high

high

high

high

high

high