Riskcovery

CVE-2024-1062

389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)

State
Published
Severity
5.5 Medium
Published
Feb 12, 2024
Updated
Feb 25, 2026
Reserved
Jan 30, 2024

Read the record on cve.org

Description

A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hredhat

Weaknesses

Affected Products

ProductVersions
389-ds-base
  • 1.4.3.0 to before 2.2.*Affected
  • 2.3.0 and laterNot affected
Red Hat Directory Server 11.5 E4S for RHEL 8Red Hat
  • 8060020250210084424.0ca98e7e and laterNot affected
Red Hat Directory Server 11.7 for RHEL 8Red Hat
  • 8080020240306153507.f969626e and laterNot affected
Red Hat Directory Server 11.8 for RHEL 8Red Hat
  • 8090020240606122459.91529cd0 and laterNot affected
Red Hat Directory Server 12.2 EUS for RHEL 9Red Hat
  • 9020020240916150035.1674d574 and laterNot affected
Red Hat Enterprise Linux 8Red Hat
  • 8100020240315011748.945b6f6d and laterNot affected
Red Hat Enterprise Linux 8.6 Extended Update SupportRed Hat
  • 8060020240213164457.824efc52 and laterNot affected
Red Hat Enterprise Linux 8.8 Extended Update SupportRed Hat
  • 8080020240807050952.6dbb3803 and laterNot affected
Red Hat Enterprise Linux 9.2 Extended Update SupportRed Hat
  • 0:2.2.4-9.el9_2 and laterNot affected
Red Hat Directory Server 12Red Hat
    Red Hat Enterprise Linux 6Red Hat
      Red Hat Enterprise Linux 7Red Hat
        Red Hat Enterprise Linux 9Red Hat

          References

          Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.