A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-lib389Upgrade 389-ds-base-develUpgrade 389-ds-base-libsUpgrade 389-ds-base | Aug 14, 2024 | Jul 9, 2024 |
| Debian | — | Upgrade 389-ds-base | May 15, 2025 | Jul 9, 2024 |
| Oracle_linux | — | Upgrade python3-lib389Upgrade 389-ds-baseUpgrade 389-ds-base-develUpgrade 389-ds-base-libs | Aug 16, 2024 | Jul 9, 2024 |
| Redhat_linux | — | Upgrade python3-lib389Upgrade 389-ds-base-libsUpgrade 389-ds-base-develUpgrade 389-ds-base-debuginfoUpgrade 389-ds-base-snmp-debuginfoUpgrade 389-ds-base-debugsourceUpgrade 389-ds-baseUpgrade 389-ds-base-libs-debuginfo | Sep 13, 2024 | Jul 9, 2024 |
| Rocky_linux | — | Upgrade 389-ds-base-develUpgrade 389-ds-base-libsUpgrade 389-ds-base-libs-debuginfoUpgrade 389-ds-base-debuginfoUpgrade 389-ds-base-debugsourceUpgrade 389-ds-base | Aug 22, 2024 | Jul 9, 2024 |
| Suse | — | Upgrade 389-dsUpgrade lib389Upgrade 389-ds-snmpUpgrade 389-ds-develUpgrade libsvrcore0 | Dec 5, 2025 | Dec 5, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub