Files
vuln-nvd/data/2024/CVE-2024-3657.json
T

2 lines
8.3 KiB
JSON

{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:directory_server_e4s:11.5::el8"],"defaultStatus":"affected","packageName":"redhat-ds:11","product":"Red Hat Directory Server 11.5 E4S for RHEL 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8060020250210084424.0ca98e7e","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:directory_server:11.7::el8"],"defaultStatus":"affected","packageName":"redhat-ds:11","product":"Red Hat Directory Server 11.7 for RHEL 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8080020240909040333.f969626e","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:directory_server:11.8::el8"],"defaultStatus":"affected","packageName":"redhat-ds:11","product":"Red Hat Directory Server 11.8 for RHEL 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8090020240606122459.91529cd0","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:directory_server:11.9::el8"],"defaultStatus":"affected","packageName":"redhat-ds:11","product":"Red Hat Directory Server 11.9 for RHEL 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8100020240604161237.37ed7c03","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:directory_server_eus:12.2::el9"],"defaultStatus":"affected","packageName":"redhat-ds:12","product":"Red Hat Directory Server 12.2 EUS for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"9020020240916150035.1674d574","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:directory_server:12.4::el9"],"defaultStatus":"affected","packageName":"redhat-ds:12","product":"Red Hat Directory Server 12.4 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"9040020240604143706.1674d574","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7::client","cpe:/o:redhat:enterprise_linux:7::computenode","cpe:/o:redhat:enterprise_linux:7::server","cpe:/o:redhat:enterprise_linux:7::workstation"],"defaultStatus":"affected","packageName":"389-ds-base","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.3.11.1-5.el7_9","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream"],"defaultStatus":"affected","packageName":"389-ds:1.4","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8100020240613122040.25e700aa","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:8.8::appstream"],"defaultStatus":"affected","packageName":"389-ds:1.4","product":"Red Hat Enterprise Linux 8.8 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8080020240807050952.6dbb3803","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb"],"defaultStatus":"affected","packageName":"389-ds-base","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.4.5-8.el9_4","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.2::appstream"],"defaultStatus":"affected","packageName":"389-ds-base","product":"Red Hat Enterprise Linux 9.2 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.2.4-9.el9_2","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:10"],"defaultStatus":"unaffected","packageName":"389-ds-base","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:6"],"defaultStatus":"unknown","packageName":"389-ds-base","product":"Red Hat Enterprise Linux 6","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service"},{"lang":"es","value":"Se encontró una falla en 389-ds-base. Una consulta LDAP especialmente manipulada puede causar potencialmente una falla en el servidor de directorio, lo que lleva a una denegación de servicio."}],"id":"CVE-2024-3657","lastModified":"2026-11-04T21:17:38.907","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-3657","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-06-05T20:48:33.613730Z","version":"2.0.3"}}]},"published":"2024-05-28T13:15:11.057","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:3591"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:3837"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:4092"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:4209"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:4210"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:4235"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:4633"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:5690"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:6576"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:7458"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2025:1632"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2024-3657"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2274401"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:3591"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:3837"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:4092"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:4209"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:4210"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:4235"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:4633"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/security/cve/CVE-2024-3657"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2274401"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00015.html"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-20"}],"source":"secalert@redhat.com","type":"Secondary"}]}