2 lines
7.6 KiB
JSON
2 lines
7.6 KiB
JSON
{"affected":[{"affectedData":[{"collectionURL":"https://github.com/389ds/389-ds-base","defaultStatus":"unaffected","packageName":"389-ds-base","versions":[{"lessThan":"3.1.1","status":"affected","version":"0","versionType":"semver"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:directory_server_e4s:11.5::el8"],"defaultStatus":"affected","packageName":"redhat-ds:11","product":"Red Hat Directory Server 11.5 E4S for RHEL 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8060020250210084424.0ca98e7e","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:directory_server:11.8::el8"],"defaultStatus":"affected","packageName":"redhat-ds:11","product":"Red Hat Directory Server 11.8 for RHEL 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8090020240606122459.91529cd0","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:directory_server:11.9::el8"],"defaultStatus":"affected","packageName":"redhat-ds:11","product":"Red Hat Directory Server 11.9 for RHEL 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8100020240604161237.37ed7c03","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:directory_server:12.4::el9"],"defaultStatus":"affected","packageName":"redhat-ds:12","product":"Red Hat Directory Server 12.4 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"9040020240604143706.1674d574","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7::client","cpe:/o:redhat:enterprise_linux:7::computenode","cpe:/o:redhat:enterprise_linux:7::server","cpe:/o:redhat:enterprise_linux:7::workstation"],"defaultStatus":"affected","packageName":"389-ds-base","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.3.11.1-5.el7_9","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream"],"defaultStatus":"affected","packageName":"389-ds:1.4","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8100020240613122040.25e700aa","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:8.8::appstream"],"defaultStatus":"affected","packageName":"389-ds:1.4","product":"Red Hat Enterprise Linux 8.8 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8080020240807050952.6dbb3803","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb"],"defaultStatus":"affected","packageName":"389-ds-base","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.4.5-8.el9_4","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.2::appstream"],"defaultStatus":"affected","packageName":"389-ds-base","product":"Red Hat Enterprise Linux 9.2 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.2.4-9.el9_2","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:6"],"defaultStatus":"unknown","packageName":"389-ds-base","product":"Red Hat Enterprise Linux 6","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input."},{"lang":"es","value":"Se encontró una vulnerabilidad de denegación de servicio en el servidor ldap 389-ds-base. Este problema puede permitir que un usuario autenticado provoque una falla del servidor al modificar \"userPassword\" utilizando una entrada con formato incorrecto."}],"id":"CVE-2024-2199","lastModified":"2026-11-05T12:17:48.667","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":5.7,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":2.1,"impactScore":3.6,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-2199","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-05-28T15:52:25.507062Z","version":"2.0.3"}}]},"published":"2024-05-28T12:15:08.950","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:3591"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:3837"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:4092"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:4209"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:4210"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:4235"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:4633"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:5690"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2025:1632"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2024-2199"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2267976"},{"source":"secalert@redhat.com","url":"https://www.port389.org/docs/389ds/releases/release-3-1-1.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:3591"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:3837"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:4092"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:4209"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:4210"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:4235"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:4633"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/security/cve/CVE-2024-2199"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2267976"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00015.html"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-20"}],"source":"secalert@redhat.com","type":"Secondary"}]}
|