High 7.5

389-ds-baseに細工されたLDAP問い合わせで、サービス運用が妨げられる脆弱性

CVE-2024-3657 First seen on SecPulse May 28, 2024

Summary

2024年5月に公表された389-ds-baseの脆弱性です。細工されたLDAP問い合わせによりディレクトリサーバーが処理に失敗し、サービス拒否(DoS)の状態になるおそれがあります。CVSSは7.5(高)です。修正版の情報は、最新の情報を確認してください。

AI summary

Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.

Fix status by distribution

Records published by each distribution for this CVE. Fixed versions differ by release; check each link.

Debian DEBIAN-CVE-2024-3657 389-ds-base Fix available
Ubuntu UBUNTU-CVE-2024-3657 389-ds-base No fixed version in this record

Original description The description as published by the source.

A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service

Source: CVE.org (CVE Program・cvelistV5) NVD

Summary

AI summary

Fix status by distribution

References