Nixpkgs security tracker

Untriaged

Permalink CVE-2024-6237

6.5 MEDIUM

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): NONE
Availability impact (A): HIGH

created 9 months, 1 week ago

389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request

A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.

References

RHSA-2024:4997 vendor-advisoryx_refsource_REDHAT
RHSA-2024:5192 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHAT
RHBZ#2293579 x_refsource_REDHATissue-tracking
https://github.com/389ds/389-ds-base/issues/5989
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293579 x_refsource_REDHATissue-trackingx_transferred
https://github.com/389ds/389-ds-base/issues/5989 x_transferred
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHAT
RHBZ#2293579 x_refsource_REDHATissue-tracking
https://github.com/389ds/389-ds-base/issues/5989
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHAT
RHBZ#2293579 x_refsource_REDHATissue-tracking
https://github.com/389ds/389-ds-base/issues/5989
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHAT
RHBZ#2293579 x_refsource_REDHATissue-tracking
https://github.com/389ds/389-ds-base/issues/5989
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHAT
RHBZ#2293579 x_refsource_REDHATissue-tracking
https://github.com/389ds/389-ds-base/issues/5989
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293579 x_refsource_REDHATissue-trackingx_transferred
https://github.com/389ds/389-ds-base/issues/5989 x_transferred
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHAT
RHBZ#2293579 x_refsource_REDHATissue-tracking
https://github.com/389ds/389-ds-base/issues/5989
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293579 x_refsource_REDHATissue-trackingx_transferred
https://github.com/389ds/389-ds-base/issues/5989 x_transferred
RHSA-2024:4997 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHAT
RHBZ#2293579 x_refsource_REDHATissue-tracking
https://github.com/389ds/389-ds-base/issues/5989
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293579 x_refsource_REDHATissue-trackingx_transferred
https://github.com/389ds/389-ds-base/issues/5989 x_transferred
RHSA-2024:4997 vendor-advisoryx_refsource_REDHAT
RHSA-2024:5192 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHAT
RHBZ#2293579 x_refsource_REDHATissue-tracking
https://github.com/389ds/389-ds-base/issues/5989
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293579 x_refsource_REDHATissue-trackingx_transferred
https://github.com/389ds/389-ds-base/issues/5989 x_transferred
RHSA-2024:4997 vendor-advisoryx_refsource_REDHAT
RHSA-2024:5192 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHAT
RHBZ#2293579 x_refsource_REDHATissue-tracking
https://github.com/389ds/389-ds-base/issues/5989
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293579 x_refsource_REDHATissue-trackingx_transferred
https://github.com/389ds/389-ds-base/issues/5989 x_transferred
RHSA-2024:4997 vendor-advisoryx_refsource_REDHAT
RHSA-2024:5192 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHAT
RHBZ#2293579 x_refsource_REDHATissue-tracking
https://github.com/389ds/389-ds-base/issues/5989
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293579 x_refsource_REDHATissue-trackingx_transferred
https://github.com/389ds/389-ds-base/issues/5989 x_transferred
RHSA-2024:4997 vendor-advisoryx_refsource_REDHAT
RHSA-2024:5192 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHAT
RHBZ#2293579 x_refsource_REDHATissue-tracking
https://github.com/389ds/389-ds-base/issues/5989
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293579 x_refsource_REDHATissue-trackingx_transferred
https://github.com/389ds/389-ds-base/issues/5989 x_transferred
RHSA-2024:4997 vendor-advisoryx_refsource_REDHAT
RHSA-2024:5192 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHAT
RHBZ#2293579 x_refsource_REDHATissue-tracking
https://github.com/389ds/389-ds-base/issues/5989
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293579 x_refsource_REDHATissue-trackingx_transferred
https://github.com/389ds/389-ds-base/issues/5989 x_transferred
RHSA-2024:4997 vendor-advisoryx_refsource_REDHAT
RHSA-2024:5192 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHAT
RHBZ#2293579 x_refsource_REDHATissue-tracking
https://github.com/389ds/389-ds-base/issues/5989
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293579 x_refsource_REDHATissue-trackingx_transferred
https://github.com/389ds/389-ds-base/issues/5989 x_transferred
RHSA-2024:4997 vendor-advisoryx_refsource_REDHAT
RHSA-2024:5192 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHAT
RHBZ#2293579 x_refsource_REDHATissue-tracking
https://github.com/389ds/389-ds-base/issues/5989
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293579 x_refsource_REDHATissue-trackingx_transferred
https://github.com/389ds/389-ds-base/issues/5989 x_transferred
RHSA-2024:4997 vendor-advisoryx_refsource_REDHAT
RHSA-2024:5192 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHAT
RHBZ#2293579 x_refsource_REDHATissue-tracking
https://github.com/389ds/389-ds-base/issues/5989
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293579 x_refsource_REDHATissue-trackingx_transferred
https://github.com/389ds/389-ds-base/issues/5989 x_transferred
RHSA-2024:4997 vendor-advisoryx_refsource_REDHAT
RHSA-2024:5192 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHAT
RHBZ#2293579 x_refsource_REDHATissue-tracking
https://github.com/389ds/389-ds-base/issues/5989
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293579 x_refsource_REDHATissue-trackingx_transferred
https://github.com/389ds/389-ds-base/issues/5989 x_transferred
RHSA-2024:4997 vendor-advisoryx_refsource_REDHAT
RHSA-2024:5192 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHAT
RHBZ#2293579 x_refsource_REDHATissue-tracking
https://github.com/389ds/389-ds-base/issues/5989
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293579 x_refsource_REDHATissue-trackingx_transferred
https://github.com/389ds/389-ds-base/issues/5989 x_transferred
RHSA-2024:4997 vendor-advisoryx_refsource_REDHAT
RHSA-2024:5192 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHAT
RHBZ#2293579 x_refsource_REDHATissue-tracking
https://github.com/389ds/389-ds-base/issues/5989
https://access.redhat.com/security/cve/CVE-2024-6237 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2293579 x_refsource_REDHATissue-trackingx_transferred
https://github.com/389ds/389-ds-base/issues/5989 x_transferred

Affected products

389-ds-base

*
<2.4.5

redhat-ds:12

389-ds:1.4/389-ds-base

redhat-ds:11/389-ds-base

redhat-ds:12/389-ds-base

Matching in nixpkgs

pkgs._389-ds-base

Enterprise-class Open Source LDAP server for Linux

nixos-unstable 3.1.2
- nixpkgs-unstable 3.1.2
- nixos-unstable-small 3.1.2

Package maintainers

@ners ners <ners@gmx.ch>

Suggestion detail

References

Affected products

Matching in nixpkgs

pkgs._389-ds-base

Package maintainers